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Federal Communications Commission (FCC) 



Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. 
These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial 
environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the 
instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause 
harmful interference in which case the user will be required to correct the interference at his own expense. 

Warning: The user is cautioned that modifications to this equipment can void the authority granted by the FCC to operate the equipment 
The following repairs may be made by the customer: none. 

Canadian Emissions Standard ICES-003 

This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus as set out in the interference-causing 
equipment standard entitled "Digital Apparatus", ICES-003 of the Industry Canada. 

Cet appareil numerique respecte les limites de bruits radioelectriques applicables aux appareils numeriques de Classe A prescrites dans la norme 
sur le materiel brouilleur: "Appareils Numeriques", NMB-003 edictee par Industrie Canada. 

For products marked with the CE Telecommunications label, the following 

declaration applies: 

"The manufacturer declares that as shipped from the factory this product is in compliance with the CE Telecommunications Terminal 
Equipment Directive 91/263/EEC with the marking C C 1 68 .X. applied in respect of this declaration, and in respect of the following 
telecommunications interfaces, 

X.21(V.ll) - NET 1 

X.21bis(V.28) and X.21bis(V.35) - NET 2 

PSTN ISDN Basic Rate Interface compatible with 1.420 - NET 3 

The manufacturer further declares that the product conforms with the requirements of the Low Voltage Directive 73/23/EEC and with the 
requirements of the EMC Directive 89/336/EEC (for radiated emissions at the Class A level). This product is not intended for residential 
applications." 

ISDN Type Approval Labels 

Labels for National ISDN Type Approvals can be found on the inside surface of the backpanel of the ISDN module. 

Canadian ISDN Approval 

The ISDN interface of this device is intended for direct connection to the S/T jack of an NT-1 unit and therefore does not require 
Communications Canada certification. The P2600 should only be connected to Communications Canada approved NT-1 units. 

Statements for ISDN U Module 

NOTICE: The Canadian Department of Communications label identifies certified equipment. This certification means that the equipment 
meets certain telecommunications network protective, operational and safety requirements. The Department does not guarantee the 
equipment will operate to the user's satisfaction. 

Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local 
telecommunication company. The equipment must also be installed using an acceptable method of connection. The customer 
should be aware that compliance with the above conditions may not prevent degradation of service in some situations. 

Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier. Any 
repairs or alteration made by the user to this equipment, or equipment malfunctions, may give the telecommunications company 
cause to request the user to disconnect the equipment. 

Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines and internal 
metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas. 

CAUTION: Users should not attempt to make such connections themselves, but should contact the appropriate electric inspection authority, or 
electrician, as appropriate. 



Using This Manual 



This Installation and Applications Guide provides the basic information required to initially set up and configure 
the P2600 Bridge/Router. This guide is organized into the following sections: 

"Installation" provides instructions for installing the P2600. 

" Typical Applications & How to Configure Them" provides simple configuration examples for typical 
applications in which the P2600 might be used. The applications described in this document are for example 
only and provide a method of quick configuration of the P2600. The applications and corresponding 
configuration may be combined if the operation of the P2600 requires more complexity. For more complete 
information on all of the configuration parameters available please refer to the appropriate Menu Reference 
Manual file for your operating software on the accompanying disks. 

"Introduction to Filtering provides an introduction to the pattern filtering options of the P2600. Several 
examples of typical pattern filters are also provided. 

"Menu Trees" provides a graphical tree type overview of the structure of the built-in menu system of the P2600. 
All of the configuration is performed using the options provided in the menu system. The Menu Tree is like an 
index to the menu options. 

"Configuration Pages" provides a place to note the current configuration of the P2600 for future reference. If 
a replacement unit is required, the configuration may be quickly modified to be the same as the existing unit. 

" Octet Locations on Ethernet Framed provides a graphical representation of the various common Ethernet 
frames that the P2600 will bridge or route. When defining a pattern filter, these frame displays indicate the offset 
values to use in order to define the pattern filter correctly. 

" Servicing Information" provides information on changing Link interfaces. 

"Interface Pinouts" provides information on Link interface connectors. 



Using The Electronic Reference Manuals 

This manual and the P2600 Reference Manuals are provided as Adobe Acrobat PDF files on the accompanying 
CD-ROM. 

The Adobe Acrobat Reader program required to view the Manuals is also loaded onto the CD-ROM. In addition, 
it is available for most computer operating platforms from Adobe on the Internet at: www.adobe.com. 

The Reference Manual provides the following information: 
Introduction to bridging, routing, and P2600 features, 
Pin out references for the link modules, 
List of event and alarm logs, and 
Expanded description of programmable filtering. 

The PPP Menu Reference Manual provides the following information: 

Complete description of the options for the built-in menu system, including PPP ISDN, PPP Leased 
Line, 1490 Frame Relay and encapsulated PPP Frame Relay. 
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Installation 



The P2600 is a flexible Central Site Ethernet Bridge/Router that may be configured to 
support leased lines, ISDN circuits, PPP ISDN circuits, PPP leased lines, and frame relay 
permanent virtual circuits. 

Up to 14 leased line wide area network (WAN) modules may be installed, with links that 
may operate at speeds up to 2.048 Mbps. 

Up to 7 ISDN BRI interfaces ISDN-ST or ISDN-U link modules may be installed. Each 
ISDN BRI interface supports two 64 Kbps B-channels for a total of 14 B-channels. 

Note: ISDN BRI Modules must be mounted with the blank part of the mounting 
plate covering an odd numbered slot and connector (with the PC board behind it) in 
an even numbered slot (2, 4, 6, 8, 10, 12, 14); i.e. ISDN modules may be mounted in 
slot pairs 1-2, 3-4, 5-6, 7-8, 9-10, 11-12, or 13-14. 

A mixture of interface modules of different types may be used in a P2600 (ISDN BRI 
modules count as two interfaces and must be in even numbered slots as outlined above). 

The following instructions provide a quick set-up guide for installation of the P2600 
Ethernet Bridge /Router: 

Unpack the P2600 Router 

Rough handling during shipment can damage electronic equipment. As you unpack the 
bridge/router, carefully check for signs of damage. If damage is suspected, contact the 
shipper. Save the box and all packing material to protect the bridge /router should it ever 
need to be moved or returned for service. 

Check the packing slip that identifies the components and the LAN connector. 

Select a Site 

Place the bridge /router in a well ventilated area. The site should maintain normal office 
temperature and humidity levels. Air vents located on the sides of the bridge/router must 
have approximately one inch / 2.5 centimeters of clearance from any object. 
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Installation 



Identify the Reset Switch 

The reset switch is located on the main board inside the front cover of the bridge/router. 
The switch is located between the lOBaseT connector and the Power LED. This switch will 
perform a soft reset, which will reboot the system but leave all configuration settings as they 
were assigned. This is the equivalent to the "soft reset" option offered in the Diagnostics 
menu. To do a full reset, which clears all configuration settings and resets them to the 
default settings, select the "full reset" option in the Diagnostics menu or see Appendix D 
for instructions on performing a full hardware reset. 




Reset Switch 

Figure 1-1 Location of the Reset Switch on P2600 Router 



Identify the Connectors 

Each P2600 is configured with a standard lOBaseT LAN connector on the front of the unit, 
and 10Base5 and 10Base2 LAN connectors on the back panel. The console and power 
connections are also on the back of the unit. 



Refer to Appendix D: Servicing Information for information on installing and replacing 
modules. 
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Figure 1 -2 Rear View of the P2600 Router 




Figure 1-3 Rear View of the ISDN P2600 Router 
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Connect to the Console 



Connection to the bridge/router operator's console is made through the DB25 connector 
labeled CONSOLE on the back of the bridge/ router. 

Connect the console port of the P2600 Router to a computer running an asynchronous 
communication package or a standard asynchronous terminal. The bridge /router supports 
autobaud rates at 1200, 2400, 9600, 19,200 or 38,400 bps. Both the bridge/router and the 
bridged network are configured through the use of "hotkey" Menus. 



Make the LAN Connections 



Connection to the LAN is made through the connectors on the LAN interface module on 
the back of the bridge/router (10Base5 and 10Base2) or the lOBaseT LAN connector on 
the front of the unit. 



Connect the P2600 Router to the LAN with the available LAN interface cable. 



If the LAN connection is not lOBaseT (default configuration), then the type of LAN 
connection must be configured via the console. 

LAN Interface Type 

Location: Main 

^ Configuration 
^> LAN Set-up 

^> LAN interface type 

^> 10BoseT, 10Base2 or WBaseS 
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Make the Link Connection(s) 

By default the links are configured as permanent DTE interfaces. The clocking for each link 
will be provided by the DCE device connected to each link. 

The V.35 link modules require interface converters that convert from a DB25 connector to 
a male 34-pin (V.35) connector used for the V.35 interface. Be sure to secure the cable 
connector (s) to the bridge/router and the communications equipment with the connector 
screws to prevent accidental disconnection. 

The Tl/El and LX411 CSU-DSU modules connect with a standard RJ-45 (RJ-48C 
specification for Tl/El, RJ-48S specification for CSU/DSU) connector 

G.703 modules use a standard BNC connector with a 75 ohm cable. 

The ISDN-ST interface module of the ISDN P2600 router provides a RJ-45 connector to 
connect to the RJ-45 connector of the NT1 provided with your ISDN service. 

The ISDN-U interface module of the ISDN P2600 router provides an integrated NT1 with 
a RJ-45 connector to connect directly with your ISDN service. 

After the P2600 is powered up and the bridge/ router has established communications with 
its partner across the WAN, the "Link" LED(s) will turn green. 
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Power Up the Bridge/Router 

Once the LAN and Link connections are made and the console is connected to a terminal, 
you are ready to power-up the P2600 router. Connect the AC power cord to the back of the 
P2600 router and plug the cord into the AC wall outlet. 

Observe the LEDs as the bridge /router powers up. The LEDs will go through the 
following pattern as the power-up diagnostics are performed: 

Linkl LED yellow checking EEPROM 

Link2 LED yellow checking Flash Memory 

Link3 LED yellow checking BBM 

Link4 LED yellow checking DRAM 

Link5 LED yellow initializing hardware (1 st stage) 

Link6 LED yellow initializing hardware (2 nd stage) 
Linkl -14 LEDs all red, then offhardware check complete 

LAN LED red initializing software 



A message indicating the diagnostic step in progress will appear on the console 
screen as each is performed. 

After the power-up diagnostics are finished, the Power LED will go from red to green. 

Enter at least one <RETURN> (up to three if necessary) in order for the bridge/router to 
determine the baud rate of the terminal used for the console (i.e., autobaud). The following 
information will now be seen on the console connected to the bridge/ router : 



Terminals supported: 
ansi, avt, ibm3101, qvtl09, qvtl02, qvtll9, tvi925, 
tvi950, vt52, vtlOO, wyse-50, wyse-vp, teletype 

Enter terminal type : 



Select the terminal type being used if listed and enter its name (in lower case) at the prompt, 
or choose the terminal type teletype if your terminal is not listed. This terminal type 
operates in scroll mode and may be used successfully until a custom terminal definition is 
created. 
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Managing the P2600 Using the Menus 

This section describes the minimum configuration parameters required when setting up the 
P2600. Each of the configuration scenarios requires setting of operational parameters on 
the P2600. The built-in menu system of the P2600 is used to configure the unit. 

The P2600 menu system operates on a "hotkey" principle; navigating around the menu 
system is done by typing the number associated with the desired option; the P2600 acts on 
the choice immediately (no need to hit the "enter" key). 

The menu system consists of different menu levels each containing new configuration 
options. Navigation back out of a nested menu is easily accomplished by pressing the tab 
key. The tab key takes you to the previous menu level. If you wish to move from your 
current menu location directly to the main menu simply press the equals "=" key. 

When choosing menu options that will toggle between values, simply pressing the number 
associated with that option will cause the options value to change. Each successive selection 
of the option will cause the option's value to change again. 

Some menu options require input from the operator. When selecting an option that 
requires a value, the menu system will display the range of values acceptable and a prompt 
symbol ">". Enter the new value at the prompt symbol and press enter. Should you make 
an error in entering the new value, the <BACKSPACE> key (for most terminals) deletes the 
most recently entered characters. 

Conventions 

Throughout this section, P2600 menu options are shown that are required for the various 
configuration choices. The appropriate menu options are shown in each instance in the 
following format: 

Configuration Option Name 

Location: Main 

^> Sub-Menu Name 
^> Sub-Menu Name 
^> Option Name 

The configuration option is shown as well as the options location within 

the menu system. The ^> character indicates that a sub-menu level 
must be chosen. The option name is finally shown in italics. 

The keyboard graphic in the left margin indicates that this is information 
that the user will have to enter for configuration. 





The note icon is used to provide miscellaneous information on the configuration and 
setup of the P2600. 
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Installation 

Configuration: The Configuration Note is used to indicate that there may be a difference in 
Note configuration between the various operational modes of the P2600. This 

may mean for example that the remote site set-up is configured differently 

for an ISDN PPP router than for Frame Relay. 




The information icon is used to indicate that more information is available on this 
subject. The information is usually located within another document as specified. 



The caution icon indicates that caution should be taken when performing this task. 



Login to Bridge/Router and Enter the Required 
Configuration 

At the login screen type a 1 and the default password to enter the menu system of the P2600 
router. The default password is "BRIDGE" (case sensitive) and should be changed if 
security is desired. 

With the options of the built-in menu system, the P2600 may be configured to operate 
within your environment. 

Refer to the Menus Reference Manual file for your operating software on the accompanying 
CD-ROM for a complete description of all the Menu Options. 

The menu system of the P2600 router may also be used to view system statistics. 

Note: Bridge / Router database changes and statistics viewing may be done remotely by establishing Telnet 
connections to a partner bridge/ router across the WAN. This is accomplished by selecting the <r Telnet" 
option. 

/xmt l Location: Main 

^> Configuration 

Access Set up 
^> Telnet Set up 

^ Telnet 



Specify the name or IP address of the router you wish to connect to for 
configuration purposes or viewing of statistics. 

Noting the Device name at the top left of each Menu may identify the 
router being controlled. 

If there is no data transmitted or received for a period of 5 minutes, the 
Telnet session will be disconnected. 

To disconnect from the router being controlled, enter Control-C ( A C ). 
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/impel 



Telnet security considerations: Telnet may be disabled to prevent remote access 
control of the router. If Telenet access is enabled, the device password should be 
changed to some value other than the default to prevent unauthorized access. 

Location: Main 

^> Configuration 
^ Access Set up 

^> Device Set up 
^> Password 



If this router is being accessed by a telnet session, the operator at the console may override 
the telnet session by logging in at the console. The telnet session will be locked out for 10 
minutes or until the operator logs out. Telnet access may be disabled under the Telnet Set- 
up menu. Any attempts to connect via telnet while the router is under console control will 
be registered in the Network Events log. 
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Setting the Tl/E I Parameters 

(TI/EI WAN only) 



The parameters required for a Tl or El connection may be obtained from your service 
provider. These may then be entered via the Tl/El set-up menu to configure the router for 
that service. 

j^s Tl/El Selection: 

1^1 Location: Main 

^> Configuration 
^> WAN Set Up 

^> Link Set Up ^> 

Tl/El Set Up 

^ Link mode 
77 orE1 

Set the service mode to which this P2600 router will be connected. 

/ — Service parameters: 
1^1 Location: Main 

% Configuration 
^> WAN Set Up 

^> Link Set Up ^> 

^> Speed/ Channel rate 
56/64 kbps 

% Tl/El framing 

framed/ unframed/ SF/ ESF 
% Line encoding 
AMI/INV_AMI/ 

B8ZS/HDB3 

Select the service channel speed, framing format, and encoding as designated by the 
service provider. 



Tl/El Set Up 



Tl service requires the specification of a Line Build Out factor. This parameter modifies the 
transmitted signal to compensate for degradation due to line losses between the transmitter 
and receiver. A number of different options are available to meet standards for Tl long haul 
(direct connection to service providers central office facility), Tl short haul (connection 
through a local PBX), AT&T TR64211 specification long haul and AT&T TR64211 short 
haul. Your service provider will tell you which specification their service requires. Short haul 
LBOs are listed as the length of the cable run (in feet) between the router and the local 
exchange. 
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El service does not require line build out selection. 

> — ' Set Link Interface Type: 

1^1 Location: Main 

% Configuration 
^> WAN Set Up 

^> Link Set Up ^> 

Tl /El Set Up 

^> LBO 

as specifed 

Tl long-haul LBOs: LOdb, L7.5db, L15db, L22.5db 

Short haul LBOs: SOtollOft, S110to220ft, S220to330ft, S330to440ft, 
S440to550ft, S550to660ft 

AT&T standard TR642 11 long-haul connection: TLOdb 

AT&T standard TR64211 short-haul connection: TSOtollOft, TS110to220ft, 
TS220to330ft, TS330to440ft, TS440to550ft, TS550to660ft 



If fractional Tl/El service is being provided, you will need to specify the 
channels/timeslots to be used. 

i — Set Link Interface Type: 
1^1 Location: Main 

^> Configuration 
^> WAN Set Up 

^> Link Set Up ^> 

Tl/El Set Up 

^ Slot/Channel Set Up 
^> Start 

first channel 
\ Number 

number of channels 

Some El service providers reserve timeslot 16 for network management use. If your service 
specifies that timeslot 16 is for their use, toggle this option to reserved 

* — ' Set Link Interface Type: 

1^1 Location: Main 

% Configuration 
^> WAN Set Up 

^> Link Set Up ^> 

Tl/El Set Up 

^ Slot/Channel Set Up 
^> El Timeslot 16 
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Mandatory Configuration 



The P2600 requires a minimum amount of mandatory configuration in order to operate. 
The following table identifies the configuration parameters that must be defined for proper 
operation under the operational states shown in the table. 



Mandatory Configuration 


Bridge 


IP Router 


IPX Router 


Lease Line 


none 


IP Address 


none 


none 




IP Routing 








IP Forwarding 








ISDN - U 


ISDN - S/T 


PPP ISDN 


Frame Relay 


ISDN Switch 
Type 


ISDN Switch 
Type 


ISDN Switch 
Type 


none 


Directory 
Numbers 


Directory 
Numbers 


B channel 
assignment 








Remote Site 
Profile 






PPP Lease Line 








Frame Relay 
disabled 








Remote Site 
Profile 









The configuration options required for proper initial operation are described in Section 2: 
Typical Applications and How to Configure Them. Each configuration requires a different 
set of parameters to be entered. 

Refer to Section 2 for details on configuring the P2600 in different operational states. Also 
refer to the PPP Menus Reference Manual file for your operating software on the 
accompanying CD-ROM for a complete description of all the Menu Options. 

Other options may be changed depending upon specific installation configurations. Refer to 
the menu tree in Appendix A for a reference of the menu structure and options. 
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Identify the Status LEDs 

The three-colour Light Emitting Diodes (LEDs) on the front of the P2600 are depicted in 
Figure 1-1. The meanings of these LEDs are found in the following chart. 



Off 


Bridge/Router is powered down 


Green 


Power supply output is good 


Red 


Power supply output is bad 


Yellow 


Output from one of the supplies is bad (redundant supplies) i 


H □ □□□□□□ □ 

POV^ER □ □ □ □ □ □ □ 




Off 


Bridge/Router is powered down 


Green 


LAN is connected and forwarding 


Red 


Bridge/Router is NOT connected to the LAN or LAN Interface 
Type is configured incorrectly 


Yellow 


LAN NOT forwarding: i.e. Listening, Learning, or Blocking 


Green (flashing) 


Bridge/Router is in TFTP mode 


Yellow (flashing) 


Bridge/Router is in ZMODEM mode 


□ H □□□□□□ □ 

LAJN" □□□□□□ □ 




Off 


LINK module is not present or module is Disabled 


Green 


LINK is up 


Red 


LINK is down (failed) 


Yellow 


LINK is negotiating in ISDN. LINK is auto-learning LMI type in 
Frame Relay. Not used in Leased Line mode 


Green (flashing) 


LINK 1 - writing FLASH 
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Typical Applications & How to Configure Them 



The P2600 is a flexible Ethernet Bridge/Router that may be configured to support leased 
lines, ISDN circuits, PPP ISDN circuits, PPP leased lines, frame relay RAW 1490 
permanent virtual circuits and frame relay encapsulated PPP permanent virtual circuit. This 
section will describe how to set up the P2600 using each of its networking functions. Note 
that depending on what WAN interface modules are installed, some of the configuration 
examples may not apply; for example, if no ISDN BRI module is installed, the sections on 
setting up an ISDN PPP P2600 would not apply. 

The P2600 may be configured as a simple Ethernet bridge, an Ethernet IP router, an 
Ethernet IPX router, or a combination of the three. When operating the P2600 as a 
combination bridge/ router simply configure each of the components separately. 

Note: The configuration options described within this section are only for initial set up and 
configuration purposes. For more complete information on all of the configuration 
parameters available please refer to the P2600 PPP Menus Reference Manual file 
on the accompanying CD-ROM. 

Important: The P2600 uses FLASH memory to store the configuration information. 

Configuration settings are stored to FLASH memory after there has been 30 
seconds of idle time. Idle time is when there is no selection or modification of 
the value in the built-in menu system. If you wish to save the configuration 
immediately, enter "=" to jump to the main menu, then select "6" to save the 
configuration. 
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Bridging and Routing 

Should You Bridge or Route? 

When connecting two Local Area Networks together, the first question to ask is "should I 
bridge or route"? The decision to bridge or to route may be decided by how the existing 
networks have been already set up. 

Bridging should be used when the network consists of non-routable protocols or routable 
protocols using the same network numbers. Some protocols can only be bridged; some of 
the more well known are NetBEUI (used by Microsoft Windows), and LAT (used by Digital 
Equipment Corp.). 

If your IPX or IP network address is the same at both locations, bridging is simpler and 
requires less configuration. If the locations are to be routed together, the network numbers 
will have to be different in both cases; this could require extensive reconfiguration. 

IPX routing should be used if the two locations are already set up with different IPX 
network numbers. Routing IPX will minimize the number of SAP and RIP messages being 
sent across the WAN. 

IP routing should be used if the two locations are already set up with different IP network 
numbers or if you wish to divide your one IP network number into two sub-networks. 

In some cases both bridging and routing may be required. Routing may be required for IP 
information and bridging may be required for NetBEUI. 
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Bridging 



An Ethernet bridge intelligently forwards LAN traffic to remotely connected LANs across 
the Wide Area Network (WAN) . 




WAN connection 





LAN #1 




LAN #2 





Windows for Workgroups Computers 



Windows for Workgroups Computers 



Figure 2 -1 Bridged Local Area Networks 

Ethernet bridges simply forward information based on Ethernet MAC addresses. If a LAN 
packet is destined for a device located on a remote LAN, the bridge will forward that packet 
to the remote LAN. If a LAN packet is destined for a device located on the local LAN, the 
bridge will ignore the packet. 

Ethernet bridges also communicate to each other using what is called the Spanning Tree 
Protocol (STP). STP is used to prevent loops in a network which cause LAN traffic to be 
re-broadcast again and again causing network congestion. 

The P2600 is pre-configured to operate as an Ethernet bridge compatible with the IEEE 
802. Id Spanning Tree Protocol definitions. This means that without configuration 
modifications, the P2600 will bridge Ethernet traffic to its partner bridges when the Wide 
Area Network (WAN) connection has been established (see section 1, page 3 for WAN 
connection set-up). 

The P2600 also is pre-configured as an IPX router. This means that if you wish to 
bridge IPX traffic instead of routing it, you must disable the IPX routing function of the 
P2600. Once IPX routing has been disabled, all IPX traffic will be bridged between 
partner bridges on the WAN. 

To set up a bridge between two LANs: 

— Connect each router to the LAN it will be serving 

— Connect the WAN interface of each router to the equipment supplied by the service 
provider 



— Configure the remote site profile of the partner router if necessary (see section C) 

— Establish the WAN connection 
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IP Routing 

An Ethernet IP router is used to intelligently route Internet Protocol (IP) LAN traffic to 
remotely connected LANs across the WAN. 

Original IP Network Address 199.169.100.0 



Subnet IP Network Address 

199.169.100.64 

Subnet Mask Size 26 




Subnet Mask is 
255.255.255.192 



Router IP Address 
199.169.100.65 



Subnet IP Network Address 
199.169.100.128 
Subnet Mask Size 26 




Router IP Address 
199.169.100.129 



LAN #1 
IP Computers 




□l 



Host IP Address 
199.169.100.66 



Host IP Address 
199.169.100.67 



LAN #2 
IP Computers 





Host IP Address Host IP Address 
199.169.100.130 199.169.100.131 



Figure 2 -2 IP Routed Local Area Networks 



IP routers forward IP frames based upon their IP destination address and an internal 
routing table. The router maintains the internal routing table with the remote network IP 
addresses and the remote partner IP routers associated with those networks. When an IP 
frame is received from the local LAN, the destination IP address is examined and looked up 
in the routing table. If destination IP network is found in the routing tables, the IP router 
sends the IP frame to the remote partner router that is connected to the appropriate remote 
IP network. If no explicit route entry is found in the routing table, the IP frame is sent to 
the Default Gateway. 
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IP Addressing 

Devices on an IP network are located by their IP addresses, which is a 32 bit number 
divided into four 8 bit fields. The IP address identifies both the network and the host device 
(also known as a node) on that network. The address is usually written as the four decimal 
values for the fields (between 0 and 255) separated by decimal points; for example 
196.65.43.21. 

The high order field defines the IP class of the address. There are three commonly used 
classes of IP address: 

A: 1 to 127 

B: 128 to 191 

C: 192 to 223 

For Class A addresses, only the first 7 bits of the high order field represents the network 
address, so there can be 127 networks. The remaining three fields are the host portion of the 
address — there can be over 16 million (2 24 ) host devices on each class A network. 

Network Address Host Address 

t — A — * t K * 

rTTTTTTTI rTTTTTTTI rTTTTTTTI rTTTTTTTI 

Class A IP Address 



Class B uses the first two fields for network addresses and can address approximately 16,000 
networks. The two low order fields allow approximately 65,000 host addresses (2 16 ) for each 
network. 

Network Address Host Address 

i A 1 i K % 



TTTTTTT1 rTTTTTTTI rTTTTTTTI 



Class B IP Address 



Class C uses three high order fields to address over 2 million networks; the low order field is 
used to address up to 254 hosts. 

Network Address Host Address 



TTTTT1 rTTTTTTTI 



Class C IP Address 
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IP addresses within a private network may be assigned arbitrarily, however, if that network is 
to interconnect with the global Internet, it is necessary to obtain a registered IP address. 

For example, a small company is connected to the Internet; they are assigned a single class C 
IP network address (199.169.100.0). This network address allows the company to define up 
to 255 host addresses within their network. 

Network Address Host Address 





-* » i — 




millllirTTTTTTl 




mil 


III 


III 


INI 



199 169 100 0 



Masks 

The portion of the IP address to use as the network address is specified by using a mask; a 
mask is the contiguous number of bits to be used for the network address all set to 1. When 
the mask is logically ANDed with an IP address, the result is the network address. The mask 
is specified by entering the mask size as the number of bits in the mask. For the standard 
Class A, B and C Internet addresses, the mask sizes would be 8, 16 and 24 respectively. 

Networks are not restricted to the above standard sizes; the mask (and hence the network 
address it specifies) may be any number of bits from 8 to 32. This gives much more 
flexibility to match the size of the two fields of the IP address to the number of networks 
and hosts to be serviced. 



IP Subnets 

An IP network may be divided into smaller networks by a process called sub-netting. A 
subnet is specified using some of the high order bits of the host field of the IP address for 
sub-network addressing. The portion of the IP address to be used as the subnet address is 
defined by using a subnet mask. 

If the company in the example above (Class C IP address 199.169.100.0) decides to split 
their network into two LANs to reduce the load on their network, the original IP network 
address may be sub-netted into two or more smaller IP networks consisting of a smaller 
number of host addresses in LAN. This allows each of the sites to be a smaller IP network 
and to be routed together to allow inter-network communication. 

Network Address Subnet Host 

Bits Address 



u. 



Subnet Addressing 

The subnet mask size is the number of bits in the subnet mask. In the above figure the subnet 
mask size would be 26 (24 bits for the class C network address and 2 subnet bits). The subnet 
size is the number of subnet bits - in the above figure, the subnet size would be 2. 
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The P2600 allows mask sizes from 8 to 32 bits. The subnet mask size determines how many 
bits of the host field of the original IP network address will be used for the creation of 
subnets. In this example, specifying a mask size of 26 will produce a subnet size of 2 bits. 
Two bits gives 4 possible sub-network addresses from the original IP network address. Two 
of the resulting sub-networks will have either all zeros or all ones as the subnet address; 
these addresses are reserved for network functions and hence are invalid addresses. So 
setting a subnet size of 2 will generate two sub-networks with up to 62 host addresses each 
(64 potential addresses minus the all zero and all one addresses). The subnet mask for the 
above example networks will be 255.255.255.192: 

rTTTTTTTi rTTTTTTTi rTTTTTTTi rTTTTTTTi 

255 255 255 192 

So setting a subnet mask size of 26 will generate two sub-networks with up to 62 host 
addresses each (64 potential addresses minus the all zero and all one addresses). The new IP 
sub-network addresses will be: 199.169.100.64 and 199.169.100.128. 



Original IP Network Address 199.169.100.0 



Subnet IP Network Address 

199.169.100.64 

Subnet Mask Size 26 




Subnet Mask is 
255.255.255.192 



Router IP Address 
199.169.100.65 



Subnet IP Network Address 
199.169.100.128 
Subnet Mask Size 26 




Router IP Address 
199.169.100.129 



LAN #1 
IP Computers 





Host IP Address 
199.169.100.66 



Host IP Address 
199.169.100.67 



LAN #2 
IP Computers 





Host IP Address Host IP Address 
199.169.100.130 199.169.100.131 



Figure 2 -3 Defining an IP Subnet Mask 

To configure the routers to route between the newly created sub -networks, the following 
parameters must be defined in the built-in menu system of each router. 

, 1. IP Address 

Location: Main 

^> Configuration 
^> LAN Set up 

^> LAN IP Set up 

V IP -Address / Si%e of Subnet Mask 
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IP Default Gateway 

An IP default gateway is an IP router that is resident on the local IP network that this P2600 
is connected to and is used to route IP frames for destination networks that do not exist in 
the routing table. When an IP frame is received that is destined for a network that is not 
listed in the routing table of the router, the router will send the IP frame to the default 
gateway. If the device originating the IP frame is on the same LAN as the router, the 
router will then send an ICMP redirect message to the originating device. Any future IP 
frames for that destination network will then be sent directly to the default gateway instead 
of the router. 

A default gateway may be configured if there are a large number of routes that will pass 
through another router to a larger network. An example of this would be a router that is 
used to connect to the Internet. All of the routers on the LAN would have the Internet 
access router as the default gateway. 

IP Static Route 

With its default settings, the P2600 will automatically learn the routes to other devices on the 
network through RIP messages. In some instances it may be desirable to have a 
predetermined or static route that will always be used to reach certain devices, such as when 
one specific router is to be used to reach a destination IP network. The static route will 
have precedence over all learned RIP routes even if the cost of the RIP learned routes is 
lower. 

Edit Static Route 

Location: Main 

^ Configuration 

Q> IP Routing Set up 
Q> IP Routes 

^> Edit Static Route 

^> Destination (IP Address & Mask) 
Q> Next Hop 
^> Cost 
\ Add 

Each static IP route is defined in the Edit Static Route menu. The 
destination network IP address is specified when you first enter the 
menu and then the IP address , alias or ID number of the next hop 
route and the cost may be defined. 

Once static IP routes are defined, they may be viewed with the Show 
Static Routes command from the IP Routes menu. 

Configuration: When the IP routing protocol is set to none, static routes will be used to route 
Note traffic. The subnet mask size must also be defined when creating a static 

route entry. The subnet mask is required to allow a static route to be created 
to a different IP network address. See the previous section for an explanation 
of subnet masks. 
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IPX Routing 

The P2600 is pre- configured to operate as an IPX router. When installed in an IPX network, 
the P2600 will learn the IPX network numbers from the connected networks. It will then 
route the IPX frames to the appropriate destination IPX network. 

The IPX routing scenario may consist of one of the two following configurations. The first 
configuration consists of Novell servers located on each of the LAN segments to be 
connected. The second configuration consists of Novell servers located on only one of the 
LAN segments to be connected. The router IPX router will need to be configured 
differently in the second configuration with Novell servers located on only one of the LAN 
segments. 



Novell Servers in Both Locations 

An Ethernet IPX router is used to intelligently route Novell IPX LAN traffic to remotely 
connected LANs across the WAN. 




WAN connection 



"Z. 




IPX Network Address 
1512 




IPX Network Address 
1500 



LAN #2 





Novell IPX Client Novell Server 



Novell Server Novell IPX Client 



Figure 2 -4 IPX Routed Local Area Networks (Servers on both sides) 

IPX routers forward IPX frames based upon their IPX destination address and an internal 
routing table. The router maintains the internal routing table with the remote network IPX 
addresses and the remote partner IPX routers associated with those networks. When an 
IPX frame is received from the local LAN, the destination IPX address is examined and 
looked up in the routing tables. Once the destination IPX address is found in the routing 
tables, the IPX router sends the IPX frame to the remote partner router that is connected 
to the appropriate remote IPX network. 

When both LAN segments contain Novell servers, the IPX network numbers are learned 
automatically; simply ensure that IPX routing is enabled on the router for both networks. 

When two IPX LAN segments with Novell servers on each segment are to be 
connected together with IPX routers, you must ensure that the IPX network numbers 
on each of the Novell servers is unique. If the IPX network numbers are the same, 
the IPX routers will not operate. 



Once the WAN connections have been established to the remote partner routers, 
the IPX router portion of the routers will begin to build their routing tables according 
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to the IPX frames they receive from the network. Manual entries may be made in the 
routing tables by adding static IPX routes. 

Novell Servers in One Location Only 

Some Novell LAN installations require that a remote LAN that consists of only Novell IPX 
clients be connected to a central LAN that contains the Novell servers and some more 
clients. In this configuration, the router IPX router located at the remote site must be 
configured with the appropriate IPX network numbers. The IPX network number must be 
configured manually because there is no Novell server at the remote site. The router must 
act as a Novell server to supply the proper IPX network number to the clients on the 
remote site LAN. 

In the following diagram, the router connected to LAN #2 must be configured with IPX 
network number 1500 (or any other unique, valid IPX network number) using the 
appropriate frame type. The clients connected to LAN #2 must also be running with the 
same frame type as defined on the router. After the routers have established the WAN 
connection, the IPX routing procedures will cause the names of the services located on 
LAN #1 to be stored in the services table on the router on LAN #2. When one of the 
clients on LAN #2 starts up, it will look for a server on the local LAN and the router will 
respond with the list of servers that are located on the central LAN. 




WAN connection 



IPX Network Address 
1 500 - defined on router 



IPX Network Address 
1512 



LAN #1 





LAN #2 





Novell IPX Client Novell Server Novell IPX Client Novell IPX Client 

Figure 2 -5 IPX Routed Local Area Networks (Servers on one side) 
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The following steps must be performed on the router connected to LAN #2. 
IPX Routing Disabled 



Location: Main 

^ Configuration 

Q> IPX Routing Set up 

Q> IPX Routing 

Disabling IPX routing allows the IPX frame types to be modified. 

Configuration: IPX Routing does not need to be disabled in order to change the defined 
Note network numbers on a PPP router. 



IPX Frame Types 

Location: Main 

^ Configuration 
^> LAN Set up 

^> LAN IPX Set up 

^> Ethernet-Il Frames 
^> RAW 802.3 Frames 
^> IEEE 802.2 Frames 
^> 802.2 SNAP Frames 



Define the IPX network number for the appropriate frame type. Note 
that IPX network numbers must be unique. If more than one frame 
type is to be used, each frame type must have a unique IPX network 
number. There must be no duplicate IPX network numbers within your 
entire IPX routed network they must all be unique. The IPX network 
numbers may be any value from 0 to FFFFFFFF HEX. 

IPX Routing Enabled 

Location: Main 

^J> Configuration 

Q> IPX Routing Set up 

^> IPX Routing 

IPX routing must be re-enabled to allow the router to operate as an 
IPX router with the newly defined IPX network numbers. 

All connected router IPX routers must have IPX routing enabled for 
IPX routing to take place between the LANs. When one of the routers 
on a network has IPX routing disabled, all of the router IPX routers will 
become bridges only for IPX frames. 
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IPX Forwarding Enabled 

Location: Main 

^ Configuration 

Q> IPX Routing Set up 

^ IPX Forwarding 

IPX forwarding must be re-enabled to allow the router to forward IPX 
frames onto the WAN to the partner router IPX routers. 

The IPX Forwarding function enables or disables the forwarding of IPX traffic when 
IPX routing is enabled. When IPX forwarding is disabled, all IPX traffic across the 
WAN links will be blocked. While IPX forwarding is disabled, the router will still 
operate as an IPX router and maintain its routing and server tables. 



The configuration options described here are only for initial set up and configuration 
purposes. For more complete information on all of the configuration parameters available 
please refer to the Menu Reference Manual file on the accompanying CD-ROM. 
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PPP Overview 

Point to Point Protocol (PPP) is a connection protocol that allows control over the set-up 
and monitoring of network communications. It is used in procedures for user authentication 
(name and password), connection management (spoofing, bandwidth on demand, multilink), 
and compression. If any these functions are required on a frame relay connection, PPP 
encapsulation within frame relay is available. 

PPP Link Configuration 

A PPP connection between two routers may use a number of Network Control Protocols for 
communication. An IP router connection will use the Internet Protocol Control Protocol 
(IPCP) for all IP communications. An IPX router connection will use the Internet Packet 
Exchange Control Protocol (IPXCP) for all IPX communications. 

In order to establish an IPCP or IPXCP link connection between two PPP routers, either a 
numbered link or an unnumbered link connection must be established. The two types of 
link connections are available to allow for greater flexibility between vendors products. 

Numbered Links 

A numbered link assigns a network address (either IP or IPX) to both ends of the WAN 
connection. In a numbered link configuration, the WAN connection may be viewed as 
another LAN network with the two PPP routers simply routing information between their 
local LANs and the common connected WAN network. 

Because the WAN is considered to be a separate network, each of the stations on that 
network must be assigned a network address. If a numbered IP link is to be established, 
then each WAN interface must be assigned an IP address on a unique IP network. The 
WAN IP network address must be different from the two existing networks that are being 
connected together with the PPP routers. 

If a numbered IPX link is to be established, then each WAN interface must be assigned an 
IPX node address on a unique IPX network number. The WAN IPX network address must 
be different from the two existing networks that are being connected together with the PPP 
routers. 

The IPX node address of the local WAN link is defined as the Local IPX Node within the 
remote site profile settings. The IPX address of the WAN link of the remote PPP router is 
defined as the Peer IPX Node within the remote site profile settings. The WAN IPX 
network number is defined with the IPX Net option in the remote site profile settings. 
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Unnumbered Links 

An unnumbered link does not use network addressing on the WAN link. The WAN 
connection is roughly equivalent to an internal connection with each of the two end point 
routers operating as half of a complete router that is connected between the two endpoint 
LANs. 

When an IPCP link is set to unnumbered, the only configuration option applicable is Peer 
IP Address. The peer IP address in this case is the IP address of the remote PPP router, 
that is the IP address of its LAN connection. If the peer IP address is not specified, the 
router will attempt to determine it when negotiating the IPCP connection. 

When an IPXCP link is set to unnumbered, no addressing configuration is required. All of 
the IPX settings are negotiated during the IPXCP connection. 

When making a raw frame relay (no PPP encapsulation) connection with 
unnumbered links, the IP network address of each partner router must be manually 
entered in the remote site set up for the link to operate. 

Location: Main 

^> Configuration 
^> WAN Set up 

^> Remote Site Set up 
^> Edit Remote Site 
^> Protocol Set up 
^> IP Parameters 
^> Peer IP address 
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Multilink Operation 

Multilink operation defines the use of more than one link to connect between two PPP 
routers. The MultiLink Operation option of the remote site profile for a connection is 
enabled by default. 

When a Multilink connection is established, the Multilink (MP) options within the PPP Set 
up and Advanced PPP Set up menus will determine the operation of the Multilink 
connection. 

Location: Main 

^ Configuration 
^> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 
^ Protocol Set up 

^> Multilink 

Enabled 
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Basic Configurations 



Basic ISDN Connections 

If this P2600 is configured as an ISDN bridge/router, it may establish WAN connections to 
other bridge/ routers via ISDN (Integrated Services Digital Network) connections. 

Before the P2600 can establish an ISDN connection to another ISDN router, the ISDN 
information must be defined. The ISDN switch type must be defined for the ISDN 
interface, and the phone numbers must be defined. Refer to the following diagram that 
shows three routers connected together with two ISDN B-channels being configured on 
each unit. 



555-1202 




555-1201 



555-1301 



555-1302 



/ 



ISDN phone numbers 
assigned from the 
ISDN circuit provider 
information 



ISDN 
WAN connections 




Figure 2 -6 Basic ISDN Configuration 
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The following steps must be performed to configure the P2600: 

The default switch type for ISDN S/T interface modules is NET3, the default switch type 
for ISDN U interface modules is NI-1. If the type of service your provider uses matches the 
default setting for the interface module, the following step may be skipped, otherwise, the 
switch type must be set. 

Switch Type 

Location: Main 

^> Configuration 
^> WAN Set up 

^> Switch Type 

Ten ISDN switch types are available: net3, ni-1, ni-2, dms-100, 5ess-pp, 
5ess-mp, tphl962, kdd, Sweden, or ntt. Note that if your routers are 
located within different ISDN jurisdictions, the ISDN switch type may 
be different on each of the units. 



Directory Numbers & SPIDs 

I mm I Location: Main 

^> Configuration 
^> WAN Set up 
^> Link Set up 

^> ISDN Set up 

^> Directory Number 
^> SPID 



The directory number will be the ISDN phone number used to establish 
a call between the routers. The SPID is used to register the ISDN 
interface with the central switch. 

For switch type NET3, only one directory number is required. The router will operate 
without putting in the directory number for a NET3 switch, but it is recommended that 
it be entered. 



Most North American installations use the switch type NI-1 and must have the 
directory number entered, as well the SPID (Service Profile Identifiers) value. For an 
NI-1 switch type, enter only the local portion of the directory number unless the area 
code is required for local calls. The SPID must be set to the exact number given by 
the ISDN service provider. 
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Once the ISDN switch type and directory numbers have been configured, the P2600 must 
be reset for the new values to take effect and for the ISDN BRI interface to register with the 
central switch. 




Location: Main 

^> Diagnostics 
Q> Soft Reset 

Once the P2600 has restarted it is ready to establish ISDN connections. 

With the ISDN numbers and switch type defined, an ISDN call may be placed to another 
properly configured bridge/router. The calls may be placed manually or automatically. The 
automatic call features available are Auto-Call or IP Address Connect. An Auto-Call 
connection is established each time the P2600 starts up. An IP Address Connect call is 
established to a specifically configured remote router when certain IP traffic is received 
from the local LAN. 



Note that any time the switch type is changed a soft reset must be performed before the 
change will take effect. 

The switch type is not saved through a hard reset; the P2600 will come up with the default 
switch type — NET3; if you require a different switch type, it must be re-entered after a 
configuration reload. It is strongly recommended that the entire configuration set of the 
router be saved (Dump config.txt to the console) then reloaded (Restore config.txt from the 
console) after a hard reset. 



The configuration options described here are only for initial set up and configuration 
purposes. For more complete information on all of the configuration parameters 
available, please refer to the "P2600 PPP Menus Reference Manual. PDF" on the 
accompanying CD-ROM. 
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Basic Frame Relay Configuration 

North Americ a P2600s with at least one non-ISDN interface are configured to have frame 
relay enabled for that interface by default. P2600s shipped outside of North America with at 
least one non-ISDN interface will have frame relay disabled on that interface as a default 
setting. See the following page for instructions on switching Frame relay from disabled to 
enabled. 

If the P2600 is configured as a frame relay router, it will communicate over WAN 
connections to other Frame Relay units via Frame Relay Permanent Virtual Circuits (PVC). 
From 1 to 128 PVC's may be defined to connect to other frame relay units. Before the 
P2600 can establish a PVC connection to another frame relay router, at least one PVC must 
be defined. The P2600 is pre- configured to query the frame relay service to auto-learn the 
required parameters; they may also be set manually. 

The DLCI (Data Link Connection Identifier) number for the PVC is assigned by the frame 
relay service provider. The PVC must be defined on at least one physical links on the P2600. 
Refer to the following diagram that shows three routers connected together with two PVCs 
being configured on each unit. The configuration of the PVCs within the frame relay cloud 
is controlled by the frame relay service provider. 




Figure 2 -8 Frame Relay configuration 
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Configuration: The default configuration for routers shipped outside North America is 
to have frame relay disabled. To run frame relay on these routers, it 
must first be enabled. Selecting the Frame Relay option will toggle the 
setting from disabled to enabled. 



1*22*1 Frame Relay enable 



Location: Main 

^ Configuration 
^> WAN Set up 
^> Link Set up 

^> Frame Relay 

enabled 



The router will request confirmation of the change, enter "y es "- 



For a P2600 with a CSU-DSU interface, the default clock speed that the P2600 will expect 
to receive from the DCE link is 64Kbps. If the DCE link is 56 Kbps, then the Link Speed 
value must be reset to 56 here. 



1*22*1 Link Speed 



Location: Main 

^ Configuration 

^> WAN Set up 

^> Link Set up 

^> Unk Speed 
56 

Auto Learning the Frame Relay Configuration 

The P2600 is pre- configured to query the frame relay service to auto-learn the LMI type 
and the PVC DLCI numbers. This auto-learn function allows the P2600 to be plugged 
into the frame relay service and auto-learn the PVC configuration to become operational 
without further manual configuration, router auto-learning conforms to RFC1490. 

Manual configuration is also allowed by modifying the options within each Remote Site 
Profile and the individual link configuration menus. 

When the P2600 first starts up it will query the frame relay service to try to determine the 
LMI type on each of the frame relay links. Once the LMI type is determined, the PVC 
configurations will be known from the full status enquiry messages. If the DLCI 
numbers of the PVC's on your service are determined during this learning process, the 
router will automatically create a remote site profile for each PVC. The automatically 
created remote site profiles will be named "LinkxDLCIyyy" where x is the physical link 
number the PVC is on and yyy is the DLCI of the PVC. 
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If during this learning process the maximum number of remote sites has been 
reached, the P2600 will prompt you that there are no remote sites available. A new 
remote site cannot be auto-created unless one of the existing remote sites is 
manually deleted. 

Auto-learning with PPP encapsulation enabled (see following page) may not be 
compatible with some older model routers. If problems with auto-learning occur with 
PPP enabled, try disabling PPP encapsulation. 

Manual Configuration - LMI Type 

The LMI Type option allows you to manually specify the type of Link Management 
Interface in use by the Frame Relay service provider for the Frame Relay service. 

When the LMI type is set to none, the P2600 simply creates frame relay packets and 
sends them on the defined PVC's. The links are not checked for errors. There is no 
congestion control checking. The link is only monitored for control signals. 

To manually configure the LMI type the Auto-Learning option must be disabled. 

Auto-Learning 

Location: Main 

^> Configuration 

^> WAN Set up 
^> Link Set up 

^> Frame Relay Set up 

V Auto-learning 

Enabled 



LMI Type 

Location: Main 

^> Configuration 

^ WAN Set up 
^> Link Set up 

^ Frame Relay Set up 
^> LMI Type 



The configuration options described here are only for initial set up and configuration 
purposes. For more complete information on all of the configuration parameters 
available please refer to the "P2600 PPP Menus Reference Manual" file on the 
accompanying CD-ROM. 
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Quick Start Frame Relay 

Since the P2600 auto-learns the frame relay configuration, only a couple of parameters 
need to be configured before the unit is fully operational as an IP router for frame relay. 

Upon initial start up, the P2600 is pre- configured to query the frame relay service to auto- 
learn the LMI type and the PVC DLCI numbers. The P2600 will then automatically 
create a remote site profile for each PVC. 

Within each of the remote site profiles automatically created Bridging, IP routing, and 
IPX routing are all set to "enabled". Because each of these options are enabled by default 
and the automatically created remote site profiles will establish a PVC connection to the 
remote site routers, the P2600 will bridge and IPX route data without any user 
configuration. Because an IP router requires an IP address, the P2600 must be 
configured with an IP address before IP routing is fully operational. 

To configure an IP address for the P2600, use the IP address option. 

IP Address 

Location: Main 

^ Configuration 
^> LAN Set-up 

^> LAN IP Set-up 

^ IP Address / Subnet mask si^e 

If security is required for the PVC connection refer to the Configure PPP Security section 
for information on setting the security passwords and user names for PPP. 

By default, PPP is disabled for each of the newly created remote site profiles. If PPP 
encapsulation is desired, for example to use security, the PPP encapsulation option 
should be set to "enabled". By default, when PPP encapsulation is enabled multilink is 
also enabled. 

PPP Encapsulation 

Location: Main 

^ Configuration 

^> WAN Set-Up 

^> Remote Site Set-Up 
^> Edit Remote Site 

^ Connection Set up 

Q> PPP 

Enabled 



The configuration options described here are only for initial set up and configuration 
m/ purposes. For more complete information on all of the configuration parameters 

available please refer to the P2600 PPP Menus Reference Manual file on the 
accompanying CD-ROM. 
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Basic Leased Line Configuration 

The P2600 establishes PPP (Point to Point Protocol) WAN connections to other PPP 
Leased Line P2600 units or to other vendors PPP leased line routers via direct leased line 
connections. Either 1 or 2 links may be used to connect to other PPP routers. 

Configuration: The default configuration for P2600s shipped within North American 
with at least one non-ISDN interface module, is to have frame relay enabled 
on that interface. To run PPP leased line, frame relay must be disabled. 
Selecting the Frame Relay option will toggle the setting from ensabled to 
disabled. 



The router will request confirmation of the change, enter "y es "- 

Quick Start PPP Leased Line Connections 

A Quick Start minimal configuration may be used to initially establish a connection to 
another vendors PPP router. Once the connection is established and is working properly, 
the P2600 should be configured with a remote site profile entry for that vendors router. 

Before the P2600 can establish a link connection to another PPP router, the link speed 
information must be defined. Refer to the following diagram that shows two P2600 units 
and another vendors unit connected together with direct leased line connections. 



Frame Relay disable 



Location: Main 



^ Configuration 
^> WAN Set up 
^J> Link Set up 

^> Frame Relay 

disabled 




Figure 2 -9 Basic PPP Leased Line Configuration 
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The following steps must be performed on each of the P2600 units in the network. 

Local IP Address 

Location: Main 

^ Configuration 
^> LAN Set-up 

\ LAN IP Set-up 

^J> IP Address / Subnet mask si^e 



This is the IP address and subnet mask for the link of this P2600 in the 
unnumbered IP connection. 



Usually the clocking signal is received from the link (see Appendix D - 
Link Clocking Information). If the link interface is a V.ll, V.35 or 
RS232 connection and the link speed is different from the default 
(64Kbps), and the P2600 is to be the clock source, the link speed must 
be set to the clock speed that the P2600 receives from the DCE link 
device. 




Link Speed 



Location: Main 

^ Configuration 
^> WAN Set up 

^> Link Set up 

^> Link Speed 



Bridge Connection 

Once the link speeds have been configured, the P2600 will attempt to establish the link 
connection to the remote site PPP router. The Bridge connection does not require any 
configuration for operation. 

IP Router Connection 

Once the link speeds and local IP address have been configured, the P2600 will attempt to 
establish the link connection to the remote site PPP router. The IP connection is an 
unnumbered connection that requires only the configuration of the IP address of the P2600. 

IPX Router Connection 

Once the link speeds have been configured, the P2600 will attempt to establish the link 
connection to the remote site PPP router. The IPX connection is an unnumbered 
connection that does not require any configuration. 

If security is required for the direct dial connection refer to the Configure PPP Security 
section for information on setting the security passwords and user names for PPP. 

The configuration options described here are only for initial set up and configuration 
m/ purposes. For more complete information on all of the configuration parameters 

available please refer to the P2600 PPP Menus Reference Manual file on the 
accompanying CD-ROM. 
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Configure Remote Site Profiles 

Remote Site Profiles allow the P2600 to have different sets of configuration parameters for 
each of the remote site routers that may be called or that may call this P2600. This allows 
great control over the configuration of each possible connection. 

Each remote site profile is assigned an identification number when it is created, whether it is 
created automatically under auto-learning or manually by the user editing the remote site 
profile. The remote site is also named with an alias, which provides a more descriptive 
identifier for the remote site profile. For example, a remote site profile may be created with 
a name that describes the location of the remote router or a user name on an incoming 
connection. The alias may be up to 16 characters long and must begin with an alphabetic 
character (blanks and the character "!" are not allowed). 

There can be up to 128 remote site profiles. The ID numbers are assigned automatically in 
ascending order as the site profiles are created. 

ID numbers 129, 130 and 131 are templates for creating remote site profiles with ISDN. 
Frame Relay or Leased Line connections respectively. A template may have its parameters 
set to match common network configurations and then be used to quickly set up a new site. 
In addition to the reserved templates, you can use any remote site as a template to create a 
new site. 



The remote site profile allows the definition of various connection parameters: Circuit set- 
up, Bridge and Routing protocol configuration, activation criteria and security. 

The following steps must be performed on the P2600 in order to define a new remote site 
profile. 

Remote Site Profile ID & Alias 

Location: Main 

^t> Configuration 
^> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 



The remote site alias must be entered. The remote site profile is then 
created, an ID number is automatically assigned to it and the remote site 
profile is opened for editing. If a remote site profile already exists, either 
the ID number or the alias may be provided to access the site profile for 
editing. 



Configure Remote Site Profiles for ISDN PPP 

If this P2600 is configured to have at least one ISDN switched circuit, the ISDN call 
parameters must be defined so that the P2600 knows what ISDN phone number to dial 
when a connection to this remote site is required and what security parameters to use when 
establishing a connection. 

When this P2600 receives an ISDN connection it will prompt the calling device for a user 
name and password (PPP access security); once the name and password have been 
authenticated, the user name is used to search the remote site profile entries to find a match. 
Once a match is found, the configuration parameters defined within that remote site profile 
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are used to finish establishing the PPP connection. For example, if this P2600 receives an 
ISDN call from another device and in response to the user name prompt receives the name 
"Calgary", it will look in the remote site list for a profile with the alias "Calgary". If the 
"Calgary" profile is found, the parameters in it will be used for password authentication and 
completion of the connection. If there is no match for the user name "Calgary", the call will 
be rejected. 



The remote site profile alias, user name of the security entry, and the user 
name defined on the partner PPP router must all be the same for the 
connection to be established. 

Remote Site ISDN Phone Number 

Location: Main 

^> Configuration 
^> WAN Set up 

^> Remote Site Set up 
^> Edit Remote Site 

^ Connection Set up 
^> ISDN Call Set up 
% ISDN Number 

The ISDN number defined here is the ISDN phone number of the 
remote site ISDN PPP router. This is the ISDN phone number that will 
be dialed to establish a connection to this remote site profile. A 
connection to this remote site may be established by one of the 
following methods: 

1 a) Using the Manual Call option of the Remote Site Set up menu, 
Location: Main 

^> Configuration 

Q> WAN Set up 

^> Remote Site Set up 

^> Manual Call 

1 b) Defining this remote site profile within the IP Address connect table, which will 
cause a call to be made when a packet for this IP address is routed, 
Location: Main 

^> Configuration 

^> WAN Set up 

^ IP Address Connect 

^> IP Address Connect 

Enabled 
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1 c) Defining the Auto-Call option within the Edit Remote Site menu of this remote 
site profile. (The Auto-Call option causes the P2600 to attempt to establish a 
connection to this remote site profile each time the P2600 starts up.) 
Location: Main 

^> Configuration 

^> WAN Set up 

^J> Remote Site Set up 

^> Edit Remote Site 

^ Connection Set up 

^> Auto call 

Enabled 



1 d) Setting up an activation schedule with times the connection is to be activated and 
deactivated 

Location: Main 

^ Configuration 
^> WAN Set up 

^ Remote Site Set up 
^ Edit Remote Site 
^> Activation 

^ Schedule 

Activation intervals 

1 e) If a second ISDN channel is available and traffic level is enabled, setting the traffic 
load at which the second channel is to be activated. 
Location: Main 

^ Configuration 

^> WAN Set up 

^> Remote Site Set up 

^ Edit Remote Site 

^ Activation 

Q> Threshold 

Up Threshold 
Down Threshold 
Up Stability timer 
Down Stability timer 
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Configure Remote Site Profile for Frame Relay 

Each of the PVC's on the frame relay service must be configured within an individual 
remote site profile on the P2600. This is usually done automatically through the auto- 
learning process. When the frame relay router first starts up it will query the frame relay 
service to try to determine the PVC configurations. If the DLCI numbers of the PVC's 
on your service are determined during startup, the P2600 will automatically create a 
remote site profile for each PVC. The automatically created remote site profiles will be 
named "LinkxDLCIyyy" where x is the physical link number the PVC is on and yyy is the 
DLCI of the PVC. 

If during this learning process the maximum number of remote sites has been 
reached, the P2600 will prompt you that there are no remote sites available. A new 
remote site cannot be auto-created unless one of the existing remote sites is 
manually deleted. 

These automatically created remote site profiles may be renamed for easier identification 
or usage by changing the Remote Site Alias. 

Remote Site Profile Alias 

Location: Main 

^> Configuration 
^> WAN Set up 

^> Remote Site Set up 
^> Edit Remote Site 
^ Remote Site Alias 





Configuration: When configuring the router to use PAP or CHAP security authentication, 
Note after the unit has automatically created remote site profiles for each of the 

PVC's, either the remote site profile alias must be changed to match the 
Outgoing User Name configured on the remote site router or vice versa. If the 
local remote site alias and the remote site routers outgoing user name do not 
match, the PVC will always fail with a security violation. Also note that 
PPP encapsulation must be enabled to run security access authentication. 

With auto-learning, the above is all that is required of the user to set up frame relay 
remote site profiles. If desired, parameters may be entered manually as follows: 

Each PVC defined on this P2600 must have a DLCI (Data Link Connection Identifier) 
value assigned for proper frame relay communication. 

DLCI 



Location: Main 

V Configuration 
^> WAN Set up 

^> Remote Site Set up 
^> Edit Remote Site 

V Connection Set up 
Q> DLCI 



The DLCI number defined here is the Data Link Connection Identifier 
value provided by your frame relay service provider. This value must be 
set if auto-learning is disabled. 
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Each Remote Site PVC must be defined to exist on one of the fourteen physical links 
available on this P2600. 

,/ — ' Primary Link 

Location: Main 

^> Configuration 
^> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 

^ Connection Set up 
^ Primary Link 

The Primary Link value defines to which of the fourteen physical links 
that this PVC will be assigned. This value must be set. 

Two other values must be set before the remote site profiles are fully configured, the CIR 
and EIR. The Committed Information Rate (CIR) option specifies the data rate that the 
Frame Relay service has guaranteed to provide. The Excess Information Rate (EIR) 
option specifies the data rate that the Frame Relay service indicates may be available for 
this PVC. 

CIR 



Location: Main 

^ Configuration 
Q> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 

^t> Connection Set up 
\ CIR 

The CIR value specifies the guaranteed data rate for this PVC. This 
value must be set to the same as the value provided by the Frame Relay 
network provider. The value of 0 indicates that there is no commitment 
on the data rate. 

Configuration: When changing the CIR option for this PVC, the PVC must be disabled and 
Note then enabled before the new value will take effect. 
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EIR 



Location: Main 

^ Configuration 
Q> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 

^ Connection Set up 
^> EIR 

The EIR value specifies the indicated data rate that may be available for this 
PVC. This value must be set to the same as the value provided by the 
Frame Relay network provider. When EIR = 0, no excess burst data is 
allowed to be transmitted. If EIR is non-zero, bursting is allowed. The only 
restriction is that CIR + EIR > 0. 

Configuration: When changing the EIR option for this PVC, the PVC must be disabled and 
Note then enabled before the new value will take effect 

The Bridge, IP, IPX, and Compression settings may now be configured within the Bridge, 
Parameters, IP Parameters, IPX Parameters, and CCP Parameters menus (note: 
compression over frame relay is only available if PPP encapsulation is enabled). 

If either the Bridge portion or the IP or IPX router portion of the connection is not 
required, the appropriate Connection Protocol setting must be disabled within the 
appropriate sub-menu. For example; if an IPX only connection is to be established, the 
Bridging and IP parameters must be disabled so that the P2600 does not negotiate the 
Bridge or IP Connection Protocols on the connection. 

Connection Protocol Setting 

Location: Main 

^t> Configuration 
^> WAN Set up 

^ Remote Site Set up 
^ Edit Remote Site 
^ Protocol Set up 

^ Bridge Parameters 
^> Bridge enabled 
^ disabled 
^ IP Parameters 
^> IP enabled 
^ disabled 

Disabling a particular connection protocol option will prevent the P2600 
from negotiating that Network Connection Protocol. Leaving all 
options enabled will result in a Bridge, IP router, and IPX router 
connection. 
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Configure Remote Site Profiles for Leased Line PPP 

Remote Site Profiles allow the P2600 to have different sets of configuration parameters for 
each of the possible remote site PPP routers that may be connected to this P2600. This 
allows greater control over the configuration of each possible PPP connection. 

Each remote site profile is named with an alias. The alias provides a simple method of 
maintaining configuration control over the remote site profiles defined. For example, a 
remote site profile may be created with a name that describes the location of the remote 
PPP router. The alias also provides a method of matching a remote site profile and its 
configuration settings to a particular user name on an incoming connection. When a PPP 
security user name is defined the same as one of the remote site profiles, that remote site 
profile will be used for PPP negotiations after the security authentication process has passed. 
In other words, when this P2600 receives a link connection attempt it will prompt the 
remote device for a user name and password (PPP security). Once the name and password 
have been authenticated, the user name is used to search the remote site profile entries to 
find a match. Once a match is found, the configuration parameters defined within that 
remote site profile are used to finish establishing the PPP connection. 

The outgoing user name in the remote site security parameters entry, and the remote 
site alias defined on the partner PPP router must be the same to allow for proper 
operation. 

The following steps must be performed on the P2600 in order to define a new remote site 
profile. 

Remote Site Profile ID & Alias 



Location: Main 

V Configuration 
^> WAN Set up 

V Remote Site Set up 
^> Edit Remote Site 



The remote site alias must be entered to create a new site. If a user 
defined remote site profile already exists, only the id number needs to be 
provided to edit that site's parameters. 
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Now that the remote site profile is created, a link number must be assigned as the primary 
link number. The primary link number is the link interface that the P2600 will use to 
attempt to establish a connection to the remote site PPP router. 

Primary Link Number 

Location: Main 

^ Configuration 
^> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 

^ Connection Set up 
^ Primary Unk 

The Primary Link number defined here is the link interface used to 
establish the connection to the remote site PPP router. When a link 
number is defined within a new remote site profile, that link number will 
be removed from any remote site profile that originally was defined to 
use the link. The link will then be used within the newly defined remote 
site profile. 

When this remote site profile is defined to use Multilink protocol, the 
Secondary Connection should also be defined. 

The Bridge settings may now be configured within the Bridge Parameters menu. 

The IP settings may now be configured within the IP Parameters menu. 

The IPX settings may now be configured within the IPX Parameters menu. 

The Compression settings may now be configured within the CCP Parameters menu. 




The configuration options described here are only for initial set up and configuration 
purposes. For more complete information on all of the configuration parameters 
available please refer to the PPP Menu Reference Manual file on the accompanying CD- 
ROM. 
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Configure Remote Site Profiles for Frame Relay with ISDN backup 

Frame Relay operation is set up as described in section 2.3.2 

^ The PVC on both partner routers must be disabled during this set up 

J procedure, then re-enabled when ready to start. 

ISDN call set-up is done as described in section 2.3.1. 

Recovery operation is set up on the secondary activation menu. 

If the ISDN circuit is to be available only at specified times, rather than all the 
time (the default), set up a recovery schedule with times the connection is to 
be activated and deactivated 

Location: Main 

^ Configuration 

^> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 
^ Connection Set up 
^ Activation 



Enter "a" and the times the recovery circuit is to be made available, enter "d" 
and the times the recovery circuit is to be deactivated. 



Enable the secondary activation circuit for recovery 



Location: Main 

^> Configuration 

^> WAN Set up 

^> Remote Site Set up 
^> Edit Remote Site 
^> Connection 
^ Recovery 



The recovery schedules MUST be set identically on both partner PPP routers 
to operate; if they are not, one router will try to bring the link up and the other 
will shut it down. 
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Configure Remote Site Profiles for PPPoE 



Remote Site Profiles allow for the router to be configured to support PPP over Ethernet 
(PPPoE) client on the router. The PPPoE feature on the Perle routers provide a PPPoE 
client support on Ethernet interfaces to a bridging DSL modem to the Internet. This feature 
will create a PPP tunnel to an ISP located somewhere on the ATM network side of the 
xDSL modem. This feature eliminates the hassle and potential error of running a PPPoE 
client on each LAN workstation that requires Internet access. 

The following steps must be performed in order for the router to be configured for PPPoE 
connection. The remote site set-up for the PPPoE should refer to the section for Configure 
Remote Site Profiles for Leased Line PPP as the initial guideline for setting up a remote site 
configuration for PPP. Afterwards the following steps transform the PPP remote site 
connection to a unique PPPoE remote site configuration. 

Location: Main 

^J> Configuration 

^> WAN Set-Up 

^ Remote Site Set-up 
^> Edit Remote Site 
^ Connection Set-up 
^ Primary Link 
^> LAN 

The Auto-Call field will be automatically setup to be enabled when a LAN interface is 
selected as the primary link. This will allow the PPPoE connection to be established 
automatically upon boot-up of the router. 

To verify that PPPoE is enabled for this remote connection, view the read-only parameter 
Location: Main 

^ Configuration 
^>WAN Set-UP 

^> Remote Site Set-Up 
^Edit Remote Site 
^Protocol Set-Up 
^>PPPoE 
^ enabled 

When setting up your PPPoE link with your ISP provider, one global IP addresses will be 
provided that should be used for the PPPoE remote site configuration. By enabled the 
NAT feature on the remote site configuration allows you to maintain only one global IP 
addresses for all PC workstation on your internal LAN. 

Location: Main 
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^J> Configuration 
^> WAN Set-up 

^> Remote Site Set-Up 
^> Edit Remote Site 
^ Protocol Set-Up 
^> IP Set-up 

^> NAT enabled 
^ enabled 



Access to some web pages is a common problem experienced when running a PPPoE client 
on a router. By design, PPPoE packets can support a maximum MTU of up 1492 bytes. 
Normally when a connection is established over common PPP, the TCP protocol negotiates 
its maximum data size using the mss option (default 1460). By default, most Windows PCs 
have their TCP mss option set to 1460 bytes. Since PPPoE requires an additional 8 bytes of 
header data, the TCP mss option should decrease to 1452 bytes. Therefore when 
configuring the router for PPPoE, the remote site NAT configuration automatically adjust 
its TCP mss option to 1452 to accommodate this requirement. To verify this value has been 
adjusted: 



Location: Main 



^ Configuration 



^>WAN Set-Up 

^Remote Site Set-up 
^Protocol Set-Up 
Parameters 
^>NAT Advanced Set-up 
^>TCP mss 
^ enabled 
^TCP mss value 
^>1452 



Normally your ISP provider will provide you with an outgoing username and password and 
to authenticate with their services. The PPPoE remote site configuration needs to have the 
security section configured with this ISP parameters to authenticate the PPPoE connection. 
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Location: Main 

^> Configuration 

^>WAN Set-Up 

^> Remote Site Set-Up 
^Security Set-Up 

^Outgoing Username 

\lSP provided username 
^Outgoing PAP password 

^ISP provided password 
^>Outg oing CHAP password (if required by ISP) 
chap password 

To ensure that network traffic is routed to the PPPoE connection, the router must be 
configured to have the default IP gateway setup to your newly created PPPoE remote site 
connection. 

Location: Main 

^t> Configuration 

^>ip Routing Set-up 
^ Gateway 

^PPPoE remote site alias 
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Advanced Features 

Configure Dynamic Host Configuration Protocol 

The P2600 uses Dynamic Host Configuration Protocol (DHCP) to allow users in a small 
office environment to be added and removed from a network with all of the network 
information (i.e. IP address, DNS, subnet mask, etc.) being configured automatically. DHCP 
configures devices (DHCP clients) from a central DHCP server. It is designed to allocate 
network addresses to a number of hosts on the P2600's LAN and supply the minimal 
configuration needed to allow hosts to operate in an IP network. 

The following steps must be performed on the P2600 to configure it as a DHCP server. 
DHCP Services 



Location: Main 

^> Configuration 

^Applications Set up 
% DHCP Set up 

\ DHCP Services 
^> Server 

DHCP Services options which are available are none, relay and server. 
Set to server to enable this device as a DHCP Server. 

IP Address Pool 

Location: Main 

^> Configuration 

^> Applications Set up 
^ DHCP Set up 

^> Server IP address pool 
V IP address pool 

^> IP Address / number of addresses 

The IP address pool option requires setting the first IP address in the 
range that is to be used for the devices attached to the DHCP Server. 
The number of addresses to be assigned must also be specified, to a 
maximum of 253. 

With the DHCP Services and IP Address Pool defined, devices may be attached to the 
network (up to the maximum specified) and they will be automatically configured. 

When setting up a router as a DHCP server that will have both a DNS server 
on the internal network and a remote connection to another DNS server (for 
example, through an ISP), then the local DNS server should be set as the 
primary DNS and the external DNS server as the secondary DNS. 
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DNS Set-Up 

Location: Main 

^ Configuration 

^> Application Set up 
^>DHCP Set-up 
^>DNS Set-up 

^Primary DNS 

-IP address local DNS server 
^Secondary DNS 
-IP address external DNS server 



External 
DNS Server 
(Secondary) 






Local 
DNS Server 
(Primary) 



Figure 2 -10 Local + External DNS Server Configuration 



The configuration options described here are only for initial set up and configuration 
purposes. For more complete information on all of the configuration parameters 
available please refer to the PPP Menus Reference Manual file on the accompanying 
CD-ROM. 
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Network Address Translation and Port Translation 

The P2600 provides support for Network Address Translation (NAT). Network Address 
Translation is a technique that translates private IP address on a private network to valid 
global IP addresses for access to the Internet. Network Address Port Translation (NAPT) 
translates both the IP address and the port number. The advantage of port translation is 
that more than one private IP address can be translated to the same global IP address. Port 
translation allows data exchanges initiated from hosts with private IP addresses to be sent to 
the Internet via the P2600 using a single global IP address. A global IP address must be 
assigned to the WAN link upon which NAPT is enabled for port translation to work. The 
global IP address will be assigned by the ISP. 

To use NAPT, the private network addresses of the services that will be available globally 
must be assigned: 




Location: Main 

^J> Configuration 

^> Applications Set up 

^> NAT Exports 

^> Edit Services 

enter the private network IP address of 
each service offered 



Then NAT (Network Address Translation) is enabled: 

NAT Enable 

Location: Main 

^ Configuration 
Q> WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 
^ Protocol Set up 
^ IP Parameters 

Q> NAT Enabled 

Enabled 



Configuration: When running frame relay RAW 1490, the local IP address and peer router IP 
Note address must be set in the IP parameters menu. 
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Private 
Network 
Addresses: 

e-mail 
server 
1.1.1.2 

telnet 
server 
1.1.1.3 



WWW 
server 
1.1.1.4 



1.1.1.6 




Figure 2 -11 NAPT Configuration 
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Security 

The P2600 provides a number of means of providing security on incoming and outgoing 
traffic on a network. These methods include access authentication, firewall limiting access to 
only designated device addresses, private network address translation (NAT) and filtering 
for both incoming and outgoing traffic. 



Configure PPP Security 

The PPP P2600 provides support for both PAP and CHAP security access authentication. 
An outgoing user name, PAP password, and CHAP secret are defined that the P2600 will 
use when responding to an authentication request from a remote site PPP router. 

The cold start defaults for the security user name and passwords are as follows. 
These defaults will exist when the P2600 is first started before and configuration is 
entered, and after a Full Reset has been performed. These default values are also 
set when the P2600 is placed in TFTP Network load mode for upgrading the 
operating software via TFTP transfers. Care should be taken when upgrading a 
group of routers that have security levels set. 

Default outgoing user name for each remote site when it is defined is the same as 
the default device name. Default PAP password and CHAP secret are both set to 
"BRIDGE". 

The complete security configuration for both incoming and outgoing calls is defined within 
the Security menu of the WAN Set up section. 

Security Level 

Location: Main 

^> Configuration 
^> WAN Set up 

V Security Set up 

^> Security Level 

The security level defines the type of security that this P2600 will request 
when a remote site PPP router attempts to establish a PPP connection. 
The security may defined as none, PAP, or CHAP. 

When a security level is defined on this P2600, an entry for each remote site PPP router that 
may be connected to this P2600 must be placed in the security database. The security 
database is used to store the user names and passwords of the remote site PPP routers. 



53 



Applications 



Remote Site Security Parameters Entry 

Location: Main 

^> Configuration 

^> WAN Set up 

^>Edit Remote Site 

^ Security Parameters 

^> Outgoing User Name 
V Incoming PAP Password 
Q> Outgoing PAP Password 

or 

% Incoming CHAP Secret 
\ Outgoing CHAP Secret 

The outgoing entries in the security database define the user names and 
passwords/secrets that this P2600 will send in response to an 
authentication request is sent from the remote partner router. The 
incoming entries define the passwords/ secrets that this P2600 expects to 
receive from the remote partner in response to authentication requests. 

For a pair of partner routers with security enabled, the outgoing user name in the 
security parameters entry of one router must match the remote site alias in the 
partner router's remote sites table. 

To use PPP security with frame relay, PPP encapsulation must be enabled. The 
[ J PVC must be disabled to change the PPP encapsulation status, then re-enabled. 



The configuration options described here are only for initial set up and configuration 
purposes. For more complete information on all of the configuration parameters 
available please refer to the P2600 PPP Menus Reference Manual file on the 
accompanying CD-ROM. 
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Configure Firewall 

The P2600 provides Firewall security for restricting access between any two networks 
connected through the router. Firewalls are set up on a per connection basis for the LAN 
and remote sites. The direction of filtering is from the perspective of the P2600; incoming 
traffic is from the network in question to the P2600, outgoing is from the P2600 to the 
network. The direction of filtering may be set to incoming, outgoing, both or none. Once 
the direction of filtering for a connection has been set, holes may be created in the firewall 
to allow specified traffic through. Normally, the LAN firewall is used for restricting intranet 
traffic (connections within the corporate network) and remote site firewalls are used to limit 
access from less trusted sources, such as the Internet or dial-up ISDN links. 

The following diagram shows a corporate head office network, which is connected, to the 
Internet with a P2600. There is also a branch office at a remote site connected with a 
leased link. The administrator at the corporate head office wishes to set up an IP firewall to 
allow everyone on the Internet to have access to the corporate FTP and Web servers and 
nothing else. The administrator also wishes to allow all of the TCP traffic from the branch 
office network to have access to the head office. Anyone in the corporation may have 
unrestricted access to the Internet. 



Main FTP server: 195.100.1.12 
Main Web server: 195.100.1.20 




Figure 2 -12 Sample Firewall Application 

The following steps must be performed on the P2600 to set up the firewall support as 
desired. 
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First the firewall on the ISP connection (remote site 1) of the WAN is set up. The firewall 
option is set to "inbound" to have this WAN firewall filter traffic from the ISP to the P2600 
while allowing unrestricted access out to the Internet. 

Firewall 



Location: Main 

% Configuration 

^> Applications Set up 
% Firewall Set up 

WAN Firewall Set up 
^> enter ID# 1 for ISP remote site 
\ Firewall 
^> inbound 

The firewall on the Internet connection is set up to protect the entire corporate 
network, including the branch office, from unauthorized traffic. 

Then the entries are made in the "Designated Servers" menu to allow Internet access to the 
FTP and Web servers on the corporate network. 

FTP & WWW Designated Servers 

Location: Main 

^> Configuration 

^> Applications Set up 
^> Firewall Set up 

^> WAN Firewall Set up 

^> ID# 1 for ISP remote site 
^> Designated Servers 
^> FTP Server 

— 195.100.1.12 

^ WWW (HTTP) Server 

— 195.100.1.20 

When defining a designated server you will be prompted for the IP 
address of that device. Adding an entry to the designated servers list 
allows you to quickly setup a firewall entry without having to figure out 
TCP port values. 

Next, the LAN firewall is set up to restrict access to the LAN. The firewall option is set to 
"outbound" to have the LAN firewall filter traffic from the P2600. 

Firewall 



I mm I 

Location: Main 

^> Configuration 

^> Applications Set up 
% Firewall Set up 

^> LAN Firewall Set up 
% Firewall 

^> Outbound 
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Then an entry is placed in the firewall table to allow the devices in the branch office remote 
site to have unlimited TCP access to devices in the head office. 

Firewall Table Entry 



Location: Main 

^ Configuration 

^> Applications Set up 
\ Firewall Set up 

^> LAN Firewall Set up 
\ Edit Firewall Entry 
% filter ID #1 
^> Destination Address 

— 195.100.1.0 

% Destination Mask 

— 255.255.255.0 
^> S ource Address 

— 195.100.2.0 
^> Source Mask 

— 255.255.255.0 
^> Protocol Type 

— TCP 

^> &/ry Direction 

— outbound 

Finally, holes are provided in the LAN firewall to allow Internet access to the FTP and 
WWW servers 

Firewall 



Location: Main 

% Configuration 

\ Applications Set up 
\ Firewall Set up 

^> LAN Firewall Set up 
\ Designated Servers 
^> FTP Server 

— 195.100.1.12 

^> WWW (HTTP) Server 

— 195.100.1.20 



• The configuration options described here are only for initial set up and configuration 
*f/ purposes. For more information on all of the configuration parameters available 
please refer to the P2600 PPP Menus Reference Manual file on the accompanying 
CD-ROM. 
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Network Address Translation 

Using private addresses on a network and NAT/NAPT for interactions over an 
internetwork connection hides the internal address from the rest of the world. Access is 
restricted to only those services that are specifically designated to be available. Please see 
section 2.4.2 for more information on Network Address Translation. 



Filters 

The programmable filtering functions available on the P2600 provide a very powerful means 
of controlling traffic flow to and from a network. Please see section 3 Introduction to 
Filtering for details on how to set up various filtering operations. 



Compression 

Compressing data allows data throughput rate considerably greater than the physical line 
rate. The actual rate achieved will depend on how compressible the specific data is. 
Generally, graphics and databases compress up to 600%, text 400 to 500%, binary codes 
about 200%. 

At line rates above 256 Kbps, compression is not effective as it takes more time to perform 
the compression than to transmit the raw data. 



Enable compression 



Location: Main 

^ Configuration 

^ WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 
^> Protocol Set up 

^> CCP parameters 
^ Compression 
^ Enabled 
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Bandwidth On Demand 

The P2600 may be set to activate its secondary link when the load on the primary link 
exceeds a user-defined threshold. 

jxHK l Set the traffic loads for enabling and disabling the secondary circuit 

Location: Main 

^ Configuration 

Q> WAN Set up 

^> Remote Site Set up 
^> Edit Remote Site 

^> Activation Set Up 
^> Threshold Set Up 
up threshold 
^ up stability timer 
^ down threshold 

^ down stability timer 

The up and down stability timers are the delay times that the primary link must be above the 
threshold before the secondary is activated or below threshold before it is brought down. 
This prevents activation or deactivation of the secondary link due to momentary peaks or 
drops in traffic. 

Bandwidth Allocation Control Protocol (BACP) may be used to negotiate the link activation 
between partner routers (BACP must be used if the partner router is not another router). 



Enable BACP 



Location: Main 

^ Configuration 

\ WAN Set up 

^ Remote Site Set up 
^> Edit Remote Site 
^ Protocol Set up 
^> BACP Set up 
^> BACP 
^ enable 
^> call mode 

^ local or partner 

Call mode determines which router originates the call to bring up the second link. 

If BACP is not used, the partner routers will use proprietary negotiations to determine 
which router is to activate the second link. 
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QOS - Priority Queuing 



Priority Queuing (PQ) allows the users to configure the router to allow specific traffic 
bound for an outgoing interface to be prioritized into high, medium, normal and low 
queues. Packets sent to the high priority queue are serviced first, followed by the packets on 
the medium queue and so on. The router can configure outbound traffic to specific queues 
based upon protocol, addresses and incoming interfaces. 

To enable Priority Queuing you must configure a Priority list which contains the criteria 
items for the outbound packets. Each packet will be compared to item #1 in the Priority 
List and then progress down the list of items in order until a match is found. When a match 
is found, the comparison search will stop and the packet will be given the priority 
configured for that item. Thus more specific priority criteria should be defined at the 
beginning of the list. 

To define item criteria within a Priority List: 



Once the Priority List is defined, the Priority List can be assigned to a Remote Site interface 
or the LAN interface. 

To assign a Priority List to a LAN interface 




Location: Main 




Location: Main 

^Configuration 



^Edit Priority List 
^Edit Items 



^ Configuration 

^>Lan Set-up 



^QOS Set-up 




To assign a Priority List to a Remote Site Configuration 
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Location: Main 



^ Configuration 
^>Wan Set-up 

^Remote Site Set-up 
^Edit Remote Site 
^Protocol Set-up 

^>LAN QOS Set-up 
^ Queuing Strategy 
^Priority 

^ Priority Ust Number 



61 



Applications 



Simple Network Time Protocol (SNTP) 



The Simple Network Time Protocol (SNTP) feature on the Perle Routers support the client 
side of the protocol as described in RFC 2030. The router will be able to obtain its time 
from a NTP or SNTP server and then can be synchronized amongst other network devices. 
Additionally, the router can also be configured to support various time variations features 
such as local time zone and adjustments for daylight savings time. 

When the Perle router has SNTP enabled it will periodically send NTP packets to the 
NTP/SNTP server which will respond with the network time. The router will synchronize 
its internal clock with the response from the NTP/SNTP server. The method in which the 
router sends or receives the NTP packets from the NTP/SNTP server is configurable in 
three modes: unicast, multicast and anycast. 

In unicast mode, the router will have to be configured with the IP Address of the NTP 
server and will periodically send a request packet to the NTP server. The NTP server will 
then respond directly to this request with the current time. The Perle router supports a 
primary and a secondary IP Address for NTP servers. 

In multicast mode, the router does not initiate the request packets but waits to receive the 
periodic broadcasts from the NTP server with the current time. Once the router receives an 
NTP packet from the server, it will then synchronize its internal clock with the current time. 

In anycast mode, the router will send out a request packet as a broadcast on the LAN to get 
a response from any NTP server. When the first response is received from an NTP server, 
the internal clock of the router is synchronized. The router will learn the IP Address of the 
NTP server that responded and then operate in unicast mode. 

The Perle router supports time variation feature of local time zones and daylight savings 
time regardless if the internal clock is synchronized with an NTP server. The local time zone 
feature allows the router to offset the internal clock by a configurable time from the UTC 
time. The configurable time zone off set can be specified in hours (0 to 23) and minutes (0 
to 59) and can also be specified by a specific name up to 4 characters. 

Adjustments to the internal clock for daylight saving time (Summer-time) can be enabled 
and specified for one time within the year or recurring year after year. Configuration 
parameters allow the router to enable Summer-time each year by specifying the month, 
week, day and hour for the begin and end Summer-time. 

To enable SNTP on the router and setup for unicast mode to directly obtain the time from a 
specific NTP server implement the following steps. 



Location: 



^ Configuration 

^Application Set-up 
Set-up 
^>SNTP Client 

^ enable 
^>Mode 

^ unicast 
^Primary IP Address 
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^IP Address (XXX.XXX.XXX.XXX) 
^Secondary IP Address 

\lP Address (XXX.XXX.XXX.XXX) 
^Version 

%3 



The time zone and daylight savings time configuration is setup within the device setup 
menu. To configure for Eastern Standard Time (EST) and have daylight saving time 
implemented for this year only, implement the following steps: 



Location: 



^> Configuration 

ccess Set-up 
^>Device Set-up 

^>Time Zone Setup 
^ Hours Offset 
^5 

^> Minutes Offset 

^0 
^>Name 

^Summer Time Setup 
^> Summer Time 

^ enabled 
^Summer Time Mode 

^date 
^Summer Time Start 

%Year 

^Month 

^>Date 

^Time 

^> Summer Time End 

^$>Year 

^>Month 

^>Date 

^Time 
Q> Offset 

^60 
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3 

Introduction 
to Filtering 

The P2600 provides programmable filtering which gives you the ability to control under 
what conditions Ethernet frames are forwarded to remote networks. There are many 
reasons why this might need to be accomplished, some of which are security, protocol 
discrimination, bandwidth conservation, and general restrictions. 

Filtering may be accomplished by using two different methods. The first method is to filter 
or forward frames based solely on their source or destination MAC address. This method 
of filtering is useful when bridging between LANs and for providing remote access security 
in any type of network. The Ethernet MAC (Media Access Control) address is checked 
against the addresses in the filtering list and the frame is filtered or forwarded accordingly. 

The second method of filtering is pattern filtering where each frame is checked against a 
filter pattern. The filter pattern may be defined to perform a check of any portion of the 
Ethernet frame. Separate filter patterns may be defined for bridged frames, IP routed 
frames, and IPX routed frames. 

For more information on filtering, please refer to the Programmable Filtering section of the 
P2600 reference manual file. The PDF file is located on the accompanying CD-ROM. 

MAC Address Filtering 

MAC address filtering is provided by three built-in functions. 

The first function is "Filter if Source"; the second is "Filter if Destination." The third 
function allows you to change the filter operation from "positive" to "negative." The 
positive filter operation causes frames with the specified MAC addresses to be filtered. The 
negative filter operation causes frames with the specified MAC addresses to be forwarded. 

You may easily prevent any station on one segment from accessing a specific resource on 
the other segment; for this, "positive" filtering and the use of "Filter if Destination" would 
be appropriate. If you want to disallow a specific station from accessing any service, "Filter 
if Source" could be used. 

You may easily prevent stations on one segment from accessing all but a specific resource 
on the other segment; for this, "negative" filtering and the use of "Forward if Destination" 
would be appropriate. If you want to disallow all but one specific station from accessing any 
service on the other segment, the use of "Forward if Source" could be used. 
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Pattern Filtering 

Pattern filtering is provided in three separate sections: Bridge Pattern Filters, IP Router 
Pattern Filters, and IPX Router Pattern Filters. When the P2600 is operating as an IP/IPX 
Bridge /Router, each of the frames received from the local LAN is passed on to the 
appropriate internal section of the P2600. The IPX frames are passed on to the IPX router, 
the IP frames are passed on to the IP router, and all other frames are passed on to the 
bridge. Different pattern filters may be defined in each of these sections to provide very 
extensive pattern filtering on LAN traffic being sent to remote LANs. 

Pattern filters are created by defining an offset value and a pattern match value. The offset 
value determines the starting position for the pattern checking. An offset of 0 indicates that 
the pattern checking starts at the beginning of the data frame. An offset of 12 indicates that 
the pattern checking starts at the 12 th octet of the data frame. When a data frame is 
examined in its HEX format, an octet is a pair of HEX values with offset location 0 starting 
at the beginning of the frame. Please refer to Appendix C - Octet Locations on Ethernet Frames 
for more information on octet locations in data frames. 

The pattern match value is defined as a HEX string that is used to match against the data 
frame. If the HEX data at the appropriate offset location in the data frame matches the 
HEX string of the filter pattern, there is a positive filter match. The data frame will be 
filtered according to the filter operators being used in the filter pattern. 

The following operators are used in creating Pattern filters. 

offset Used in pattern filters to determine the starting position to start the pattern 
checking. 

Example: 12-80 This filter pattern will match if the packet 

information starting at the 12 th octet equals the 80 
of the filter pattern. 



OR Used in combination filters when one or the other conditions must be met. 

Example: 10-20 1 12-80 This filter pattern will match if the packet 

information starting at the 10 th octet equals the 20 
of the filter pattern or if the packet information 
starting at the 12 th octet equals the 80 of the filter 
pattern. 



& AND Used in combination filters when one and the other conditions must be 
met. 

Example: 10-20&12-80 This filter pattern will match if the packet 

information starting at the 10 th octet equals the 20 
of the filter pattern and the packet information 
starting at the 12 th octet equals the 80 of the filter 
pattern. 



NOT Used in pattern filters to indicate that all packets not matching the defined 
pattern will be filtered. 
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Example: -12-80 This filter pattern will match if the packet 

information starting at the 12th octet does not 
equal the 80 of the filter pattern. 

() brackets Used in pattern filters to separate portions of filter patterns for specific 
operators. 

Example: 12-80&(1 4-24 1 14-32) This filter pattern will be checked in two 

operations. First the section in brackets will be 
checked and then the results of the first check will 
be used in the second check using the first portion 
of the filter pattern. If the packet information 
starting at the 14 th octet equals 24 or 32, and the 
information at the 12 th octet equals 80, the filter 
pattern will match. 

Popular Filters 

Shown here are some of the more commonly used pattern filters. 

Bridge 

Bridge pattern filters are applied to Ethernet frames that are bridged only. When the P2600 
is operating as a router, all routed frames will be unaffected by the bridge pattern filters. 

IP & Related Traffic 



IP & Related Traffic 


Forward only 


~(12-0800|12-0806) 


Filter 


(12-0800|12-0806) 



Novell IPX Frames 



Novell 


IPX Frames 


Ethernetll 


(12-8137) 


802.3 RAW 


(14-FFFF) 


802.2 


(14-E0E0) 


802.2 LLC 


(14-AAAA&20-8137) 



NetBIOS &NetBEUI (MS Windows) 



NetBIOS & NetBEUI (MS Windows) 


Filter 


(14-F0F0) 


Forward only 


-(14-F0F0) 
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Banyan 



Banyan 



(12-OBAD) 
(12-80C4) 
(12-80C5) 

IP Router 

IP router pattern filters are applied to IP Ethernet frames that are being routed. When the 
P2600 is operating as an IP router, all IP routed frames will be checked against the defined 
IP router pattern filters. IP routed frames are unaffected by the bridge pattern filters and 
the IPX router pattern filters. 

NetBIOS over TCP 



NetBIOS over TCP 


NETBIOS Name Service 


(22-0089) 


NETBIOS Datagram Service 


(22-008A) 


NETBIOS Session Service 


(22-008B) 



Note: Uses the TCP Destination Port location 
Other interesting TCP Ports 



Other interesting TCP Ports 


Decimal 


Hex 


Usage 


21 


15 


FTP 


23 


17 


Telnet 


25 


19 


SMTP 


69 


45 


TFTP 


109 


6D 


POP2 


110 


6E 


POP3 
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Menu Trees 



The menu trees on the following pages are a graphical representation of the 
hierarchy of the built-in menu system of the P2600. Each of the menus are 
shown with the options of the menus being displayed below the specific menu 
name. 

Each of the menu options shown in each of the menu trees is explained in the 
accompanying P2600 menu reference files. The PDF files are located on the 
accompanying CD-ROMs. 

Menu names are displayed in boxes. The numbers on the left side of the boxes 
indicate the menu option from the parent menu that this menu corresponds to. 
All menu options are listed with numbers indicating their actual position within 
the menu system. 

Menu options contained within a grayed box are ISDN options. Menu options 
contained within a black box are Frame Relay options. 
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MAIN 



— Configuration 




ISDN Options 
Frame Relay Options 



Menu Tree 

software release: 61 P6.06.xx 



Access Set-Up 



Terminal Set-Up 



Device Set-Up 



; 1 . Terminal Set-Up menu '. 1 . Terminal 

; 2. Device Set-Up menu 1 2. Show 

; 3. Telnet Set-Up menu : 3. Add 

; 4. Load FLASH Set-Up menu " 4. Remove 

; 5. Console 

; 6. Hardware Status 

■ 7. TFTP access 



; 1. Password 
; 2. Device Name 
; 3. Show Time 
■ 4. Set Time 

5. Time Zone 

6. Summer Time 



Telnet Set-Up 



Load FLASH Set-Up 



Console 



■ 1. Telnet access 
I 2. Telnet 
I 3. Telnet port 
I 4. Show Names 
I 5. Add Name 
I 6. Remove Name 



! 1. Console (ZMODEM) 
! 2. Network (TFTP) 



■ 1. Dump 
! 2. Restore 



2] 



LAN Set-Up 



; 1 . Bridge set-up menu 
; 2. IP set-up menu 
I 3. IPX set-up menu 
! 4. LAN interface type 



Bridge-STP Set-Up | 1 LAN IP Set-Up~| 1 LAN IPX Set-Up 



■ 1. State 

■ 2. Path cost 

■ 3. Priority 



3] 



WAN Set-Up 



41 

_ Remote Site Set-Up 



1 . Switch type 
2] 



Group Set-Up 



1 . Force 56 k 

2. Hunt Group # 

3. Add link 

4. Show Groups 



QOS Set-Up 



1. Secondary IP set-up 

2. LAN-NAT set-up 

3. IP address 

4. Routing protcol 

5. RIP mode 

6. Route cost 



1. Ethernet-ll frames 

2. RAW 802.3 frames 

3. IEEE 802.2 frames 

4. 802.2 SNAP frames 

5. Auto Learn 

6. Help 



1. Queuing Strategy 



1] 



Secondary IP Set-Up 



■ 1. Edit Secondary 1 

: 2. Show Secondary Entry 
i 3. Remove Secondary Entry 



Edit Secondary 



LAN -NAT set-up 



Link Set-Up 



1. Physical link type 

2. Link operation . 

3. Logical ISDN type 

4. ISDN set-up menu 

5. Group 

4. Phantom Power detect 

5. Link B channel 



4]- \ 
" — : ISDN Set-Up- 



; 1. Translation type 
j 2. Show address pool 
j 3. Dynamic IP pool 
■ 4. Add static entry 
- 5. Remove static entry 
: 6. NAT enable 



3. Frame Relay 

4. Frame Relay set-up menu 

5. T1/E1 set-up menu 
5 Link mode 

6. Link speed 

7. Link CD wait time 

8. Loop compensation 



; 1. Dial prefix 

; 2. Phantom power detect 

; 3. Force 56k 

; 4. Directory number 

■ 5. SPID 



Edit Remote Site 



1 . Edit Remote Site menu 

2. Remote site summary 



3. DisDlav learned sum ma 



3. Call summary 

4. Remove remote site 

5. Manual call 

6. Force disconnect 



1 . Connection set-up menu 

2. Activation menu 

3. Protocol set-up menu 

4. Security parameters menu 

5. Remote site alias 

6. Connection 

7. Primary connection 

8. Secondary connection 

9. Remote site type 
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■ 1. Default parameters menu I 

■ 2. Security level 

'• 3. Request security 
'• 4. CHAP challenges 
'. 5. Caller ID security 



Default Parameters 



■ 1. Outgoing user name 
! 2. Outgoing PAP password 
! 3. Outgoing CHAP secret 



PPP Set-Up 



; 1 . Advanced PPP Set-Up menu 
; 2. Restart Timer 
| 3. Configure Count 
j 4. Failure Count 
! 5. Terminate Count 



Advanced PPP Set-Up 



-3) IP Address Connect 



1. ACFC 

2. PFC 

3. Echo monitoring 

4. Quality protocol 

5. Quality interval 

6. MP encapsulation 

7. MP sequencing 

8. MP discriminator 

9. MP minimum 



; 1. Edit IP address entry 
; 2. IP address connect 
; 3. Show IP address entries 
; 4. Remove IP address entry 
5. Remote site summary 



8. Force disconnect 

9. Link summary 



ft 

Continued on 
next page 



Connection Set-Up | I— T1/E1 Set-Up 



■ 1. Secondary IP 

■ 2. Mask Size 

j 3. Subnet Mask 
- 4. Routing Protocol 
1 5. RIP mode 
! 6. Private Route 
1 7. Route Cost 



Frame Relay Set-Up 



■ 1. Auto learning 

■ 2. LMI type 

■ 3. Polling interval 

■ 4. Enquiry interval 
'• 5. Error threshold 

'. 6. Monitored events 



1 . ISDN call set-up menu 

2. Primary link 

3. Secondary link 

4. Auto-call 



DLCI 
CIR 
EIR 

Time Interval 
PPP 

State 



1 . Link mode 

2. LBO 

3. T1/E1 framing 

4. Channel rate/Speed 

5. E1 CRC4 6' 

6. Slot/Channel Set-Up 

7. Line encoding 

8. Alarm generation 

9. T1.403 PRM 



Slot/Channel Set-Up 



—. ISDN call Set-Up ■ 



■ 1 . Advanced settings r 

■ 2. ISDN number 

j 3. Alternate ISDN # 

'• 4. Group 

! 5. Wildcard 

! 6. Call you 

! 7. Call me 

! 8. Callback 



Advanced settings '. 

; 1. Callback timer 
j ; 2. Redial timer 
: 3. Redial count 



1. Idle code 

2. Number 

3. Start 

4. Speed 

5. E1 timeslot 16 

6. Status 



-^- | Bridge Parameters | — STP Parameters 



Activation 



1. Schedule 

2. Usage set-up 

3. Threshold set-up 

4. Inactivity timer 

5. Recovery timer 

Hi Schedule 



1 . Activation intervals 

2. Display schedule 

3. Display time 



Usage Set-Up 



1. Usage limit 

2. Call limit 

3. Restart time 



Threshold 



'. 1. Up threshold 
'. 2. Up stability timer 
I 3. Down threshold 
' 4. Down stability timer 



Protocol Set-Up 



! 1. Bridge parameters menu 
I 2. IP parameters menu 
! 3. IPX parameters menu 
I 4. CCP parameters menu 
I 5. CMCP parameters menu 
I 6. BACP set-up menu 
I 7. QOS set-up 
I 8. PPPoE 
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Security Parameters 



; 1. Incoming PAP password 
; 2. Incoming CHAP secret 
; 3. Outgoing user name 
; 4. Outgoing PAP password 
■ 5. Outgoing CHAP secret 



; 1. STP parameters menu 

; 2. Bridge enabled 

; 3. Tinygram 

; 4. FCS preservation 



1. State 

2. Path cost 
■ 3. Priority 



IP Parameters 



; 1. IP routing menu 

;2. NAT Advanced menu 

;3. IP enabled 

I A. NAT enabled 

;5. Link IP address 

■6. Peer IP address 

j 7. Private Route/Negotiate £ 

■ 8. VJ compression 



~| IP Routing 



; 1 . Routing protocol 

■ 2. RIP mode 

■ 3. Triggered RIP 

■ 4. Auto Default Route 
' 5. Link cost 



NAT advanced 



IPX Parameters 



I 1. IPX enabled 
I 2. Link IPX type 
I 3. IPX net 
I 4 Local IPX node 
; 5. Peer IPX node 
; 6. Static routes only 
; 7. IPX DMR enabled 
■ 8. Force RIP update 



1. Translation type 

2. Show address pool 

3. Dynamic IP pool 

4. Add static entry 

5. Remove static entry 

6. TCP mss enabled 

7. TCP mss value 



CCP Parameters 



; 1. Compression 

; 2. Extended sequence 



1] 

I — ; IP Spoofing 

■ i TCP idle 

■ 2. TCP interval 
j 3. TCP retries 

■ 4. TCP aging 



— ; CMCP Parameters ; — | 2 l-" 

; 1. IP spoofing menu 
; 2. IPX spoofing menu 
I 3. CMCP enabled 
; 4. Bridge traffic 
; 5. Disc after last 
■ 6. Suspension timeout 



IPX Spoofing 

■'i iPXtypeVu" 
■ 2. IPX broadcast 
: 3. IPX idle 
: 4. IPX interval 
I 5. IPX retries 
I 6. IPX aging 



BACP Set-Up 



! 1. BACP 

; 2. Call mode 

; 3. Request number 



QOS Set-Up 



1 . Queuing Strategy 



V 
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Application Set-Up 



5] 



6] 



7] 



8] 



9] 



1 . SNMP set-up menu 

2. DHCP set-up menu 

3. Firewall set-up menu 

4. NAT exports 

5. Syslog 

6. Time to live 

7. Traceroute 

8. Ping 

9. SNTP 



Bridging Set-Up 



; 1. Spanning Tree menu 
| 2. Bridge Forwarding 
| 3. Bridge Aging Timer 
- 4. Show Bridging Table 
! 5. Show Permanent Table 
! 6. Clear Bridging Table 



IP Routing Set-Up 



I 1. IP Routes menu 
I 2. ARP Set-up menu ■ 
I 3. IP routing 
I 4. IP forwarding 
: 5. ARP proxy 



IPX Routing Set-Up 



; 1. Static Routes menu 
! 2. Static Services menu 
j 3. IPX Routing 
■ 4. IPX Forwarding 
; 5. Local Networks 
! 6. Show Routes 
! 7. Show Services 
j 8. Help 



Filter Set-Up 



MAC Address Filters 
Bridge Pattern Filters 
IP Router Pattern Filters 
IPX Router Pattern Filters 



QOS Set-Up 



■ 1. Priority Queuing - 



Statistics 



SNMP Set-Up 



1. Edit Community menu 

2. Message Size 

3. Show Communities 

4. Remove Community 



DHCP Set-Up 



L- Edit Community 



I 1 . Write Access 
I 2. Show Addresses 
I 3. Add Address 
: 4. Remove Address 



Spanning Tree 



1. STP State 

2. Bridge Priority 

3. Forwarding Delay 

4. Message Age Timer 

5. Hello Time 

6. Show Bridge 

7. Show Ports 



Firewall Set 



1. Server IP pool address menu 

2. DNS setup menu 

3. NetBIOS setup menu 

4. DHCP services 

5. Relay destination 

6. ICMP echo verification 

7. Lease period 

8. Default Gateways 
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! Up~| - 



NAT Exports 



1. LAN firewall setup menu 

2. WAN firewall setup menu 

3. Block src IP spoofing 



LAN /WAN Firewall Set-Up 



1] 



Server IP address 



pool | 



■ 1. IP address pool 
I 2. Show address pool 
I 3. Add static address 
' 4. Remove static address 



DNS Set-Up 



■ 1. Primary DNS 

■ 2. Secondary DNS 

■ 3. Domain name 



NetBIOS Setup 



IP Routes 



1] 



1. Edit Static Route ■ 

2. Default Gateway 

3. Show all Routes 

4. Show Static Routes 

5. Clear Static Routes 



- 1. Send NetBIOS node type 
I 2. Send NetBIOS scope 
I 3. Send NetBIOS name srv 
1 4. NetBIOS node type 
I 5. NetBIOS scope Id 
" 6. NetBIOS name server 



1. Designated servers menu 

2. Edit firewall entry menu 

3. Firewall 

4. Firewall statistics 

5. Clear statistics 

6. Show firewall entries 

7. Remove entry 

11 I 

^-■Designated Servers 



. 1. E-mail (SMTP) server 
: 2. POP 2/3 server 

1 3. FTP server 

1 4. WWW (HTTP) server 

1 5. Telnet server 

1 6. Local DNS 

; 7. Remote DNS 
; 8. Secondary local DNS 
9. Secondary remote DNS 



Edit Firewall Entry 



Edit Static Route 



ARP Set-Up 



; 1. ARP aging timer 

: 2. ARP retry timer 

J 3. Add 

■ 4. Remove 

-5. Show ARP table 



Static Routes 



1. Edit Route 

2. Convert Route 

3. Show Static Routes 

4. Clear Static Routes 



1. Destination 

2. Status 

3. Remote site 

2. Next hop 

3. Type 

4. Cost 

5. Private 

6. Add/Remove 

7. Network mask 

8. Status 

2] 



11. Dest IP address 
! 2. Destination mask 

13. Source IP address 

1 4. Source mask 

1 5. Protocol type 

1 6. Source port 

; 7. Destination port 
;8. Description 
■9. Entry direction 



1. Edit Services 

2. Router port 

3. Default export 

4. Show services 

5. Clear services 

1 1 I 



Syslog 



: 1 . Syslog 
j 2. Syslog IP 
■ 3. Events 
I 4. Security 
j 5. Activation 
: 6. Firewall 



Edit Services 



SNTP 



1 . Other Services menu I 1 - SNTP cllient 



2. E-mail 

3. POP 2/3 

4. FTP 

5. WWW (HTTP) 

6. Telnet 

7. DNS 



I 2. Mode 

■ 3. Primary Server IF 
I 5. Secondary Serve 
'• 6. Version 
: 7. Status 



Other Services 

1] 



; 1. NAT port 

■ 2. Status 

■ 3. Host IP address 
j 4. Host port 

■ 5. Description 
" 6. Remove 



Router Port 



11. Telnet 

1 2. TFTP 
"3. SNMP 



Edit Route 



; 1 . Status 
■2. Network 
■3. Interface 
■4. Hops 
■ 5. Ticks 



Static Services 



; 1. Edit Service — — 
; 2. Convert Service 
; 3. Show Static Services 
; 4. Clear Static Services 



Edit Service 



1. Status 

2. Server Name 

3. Service Type 

4. Interface 

5. Network 

6. Node 

7. Socket 

8. Hops 



MAC Address 
Filters 

1] 

; 1. Edit MAC Address Filter - 
; 2. Filter Operation 
; 3. Broadcast Address 
; 4. Show Bridging Table 
; 5. Show Permanent Table 
; 6. Clear Bridging Table 



Edit MAC 
Address Filter 



Bridge Pattern 
Filters 



IP Router Pattern 
Filters 



4] 



IPX Router Pattern 
Filters 



1 . Status 

2. Location 

3. Filter If Source 

4. Filter If Destination! 7. Help 

5. Permanent 

6. Remove 1] 



1. Show Alias 

2. Add Alias 

3. Remove Alias 

4. Show Pattern 

5. Add Pattern 

6. Remove Pattern 



1 1. Show Alias 
j 2. Add Alias 
I 3. Remove Alias 
1 4. Show Pattern 
I 5. Add Pattern 
! 6. Remove Pattern 
I 7. Help 



1 1. Show Alias 
j 2. Add Alias 
I 3. Remove Alias 
I 4. Show Pattern 
I 5. Add Pattern 
! 6. Remove Pattern 
I 7. Help 



Priority Queuing 



■ 1. Edit List 

j 2. Show Priority List 

■ 3. Remove Priority List 

■ 4. Show Statistics 

■ 5. Clear Statistics 



Edit Priority List 



; 1. Edit Items 

■ 2. Show Items 

■ 3. Remove Item 

■ 4. Default Priority 

■ 5. Queue Limit Setup - 



Edit Item 



; 1. Priority 

■ 2. Selection 

: 3. Protocol Parameter 



Queue Limit Set-Up 



■1. High 

■ 2. Medium 

■ 3. Normal 
1 4. Low 



Statistics Set-Up 



1 . Statistics set-up menu \ \ Extended Statistics 

2. Remote site information menu;,' a M w 

3. LAN statistics menu - 3 - Clear All Statistics 

4. Link stats 

5. Link summary 

6. Interface stats 

7. Interface status 

8. Clear link & interface stats 



Remote Site 
Information 



LAN Statistics 



1. Common protocol stats 

2. PPP statistics 



3. Frame relay statistics 



4. btatus 

5. Usage information 

6. Clear remote site stats 



! 1. Bridged traffic 

I 2. IP traffic 

I 3. IPX traffic 

I 4. Total LAN traffic 

! 5. LAN error 

I 6. Clear LAN statistics 

! 7. Clear LAN errors 



Diagnostics 



; 1. Soft Reset 
; 2. Full Reset 
■ 3. Heartbeat 
| 4. WAN trace 
: 5. WAN loopback 



Network Events 



! 1. Acknowledge alarm 

! 2. Show events 

! 3. Clear events 

! 4. Show security log 

! 5. Clear security log 

! 6. Show resumption log 

I 7. Clear resumption log 



Logout 


Help 





WAN Trace 



; 1. Trace link 

; 2. Real Time 

; 3. Capture 

; 4. End 

; 5. Data display 

1 6. Time 



WAN Loopback 



\ 1. Link operation 
I 2. Data test 

; 2. Test pattern set-up menu 
\ 3. T1/E1 loopback menu 
; 3. CSU/DSU self test 
; 4. CSU/DSU digital loopback 
; 5. CSU/DSU remote loopback 
6. Help 



Test Pattern Set-Up 



: 1. Pattern 
" 2. Start Xmt 



T1/E1 Loopback 



'. 1. Loopback type 
'. 2. Loopback node 
'. 3. Loopback delay 
I 4. Start/Stop loopback 



Menu Tree 

software release: 61 P6.06.xx 



Appendix B 
Octet Locations on 
Ethernet Frames 



This appendix provides octet locations for the various portions of three of the common 
Ethernet frames. When creating pattern filters these diagrams will assist in the correct 
definition of the patterns. The offset numbers are indicated by the numbers above the 
frame representations. 

Note the differences in the TCP/IP and Novell frames when bridging and when routing. 
When routing, the TCP/IP and Novell frames are examined after the Level 2 Ethernet 
portion of the frame has been stripped from the whole data frame. This means that the 
offset numbers now start from 0 at the beginning of the routed frame and not the bridged 
frame. 

Some of the common Ethernet type codes are also shown here. The Ethernet type codes 
are located at offset 12 of the bridged Ethernet frame. 

Octet Locations on a Bridged TCP/IP Frame 
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Octet Locations 

Octet Locations on a Bridged Novell Netware Frame 
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ETHERNET CHECKSUM 



ETHERNET Type Codes 



Type Code 


Description 


0800 


DOD IP 


0801 


X.75 Internet 


0804 


Chaosnet 


0805 


X.25 Level 3 


0806 


ARP 


0807 


XNS Compatibility 


6001 


DEC MOP Dump/Load 
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DEC MOP Remote Console 
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DEC DECNET Phase IV Route 
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DEC LAT 
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DEC Diagnostic Protocol 


6006 


DEC Customer Protocol 


6007 


DEC LAVC, SCA 
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Reverse ARP 


803D 


DEC Ethernet Encryption 


803F 


DEC LAN Traffic Monitor 


809B 


Appletalk 


80D5 


IBM SNA Service on Ether 


80F3 


AppleTalk AARP (Kinetics) 


8137-8138 


Novell, Inc. 


814C 


SNMP 
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Configuration Pages 

Octet Locations on an IP Routed TCP/IP Frame 
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Octet Locations 

Octet Locations on a Bridged XNS Frame 
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Opening of the case 

and removal of 
modules is only to be 
performed by qualified 
service personnel. 



Appendix C 
Servicing Information 



Identifying the Internal Components 



The major components of concern are shown in the following illustration. 
Note: the first time the Main boards are removed, the clear plastic tabs that secure the boards 
during snipping will need to be removed. These are fitted with phillips head screws. 

Straps W6, 
W7& W8 



Main & Backup 
Batteries 



Main System 
Memory 




Main CPU 



Reset Switch 



14 Port WAN Board 



Strap W5 



Figure C-l View of the P2600 Bridge/Router Main and Expansion Boards 

Main Board Strap Settings 



Strap 


1-2 Position 


2-3 Position 


Wl 


Factory purposes only 


Factory purposes only 


W2 


Factory purposes only 


Factory purposes only 


W3 


Override password setting 


Allow password setting (default) 


W4 


Remain in Console load mode 


Operational mode (default) 


W5 


Battery backup enabled (default) 


Battery Backup Disabled 


W6 


WAN expansion board installed 


WAN expansion board not installed 


W7 


Factory purposes only 


Factory purposes only 


W8 


16MB DRAM 


4 MB DRAM 
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Servicing Information 



Changing the Batteries 

The battery has an approximate lifetime of 5 years. Schedule replacement at some time less 
than this to ensure consistent performance. Both batteries should be replaced when one of 
the batteries is reported as low. 



CAUTION ! 

Danger of explosion if battery is incorrectly replaced. 

Replace only with the same or equivalent type recommended by the 

manufacturer. 

Dispose of used batteries according to the manufacturer's instructions. 



Removing the batteries will destroy the current configuration. It is recommended 
that you perform a DUMP of the configuration using the Options found in the 
Access Set-Up Menu before removing the batteries. 

DO NOT OPERATE the bridge/router without both batteries, as even in the 
discharged state they complete an important circuit. Leave the discharged batteries 
in place until new batteries are obtained. 

1) Acquire two new 2430 Lithium batteries. The new batteries should be Sanyo or 
Renata CR2430, or equivalent 

2) Dump the configuration, so it can be saved to disc and loaded back once battery 
replacement is completed. 

3) Remove power from the bridge/router and open the front. Remove the main 
board. 

4) Before touching the PCB, touch something metal to reduce the chance of static 
discharge harming the electronic circuits. 

5) Carefully lift the center tab securing each battery enough so that the battery can be 
removed. Note the position of the old battery. 

6) Install the new batteries, taking care to install them in the same position as the old 
batteries. 

7) Install the main board, close the front, and power up the bridge/router. 

8) Use the Load command found in the Access Set-Up Menu to load the configuration 
that was saved to disc with the Dump command. 
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Servicing Information 

Changing Link Interfaces 

1) Remove power from the bridge/ router. 

2) Remove the two screws securing the Link module to the rear of the bridge/ router. 

3) Remove the Link module from the bridge/router. Be sure to grip the module only 
by the flange at the bottom of the metal panel. 

4) Install the new Link module and secure with the two screws. 

5) Power up the bridge/ router. 

6) Enable the module from the WAN Set-Up menu. 

Modules may be "hot swapped" (without powering down the unit) provided the exact 
same type of module interfaces are swapped out and in. Perform a hot swap as follows: 

1) Disable the module from the WAN Set-Up menu. If this is an ISDN module, both 
links must be disabled. 

Important: Failure to disable module operation before changing WAN 
modules may cause damage to the P2600 and the WAN module. 

2) Remove the two screws securing the Link module to the rear of the bridge/ router. 

3) Remove the Link module from the bridge/router. Be sure to grip the module only 
by the flange at the bottom of the metal panel. 

4) Install the new Link module and secure with the two screws. 

5) Enable the module from the WAN Set-Up menu. 

To Clear a "Lost" Password 

1) Remove power from the bridge/ router. 

2) Open the front of the bridge/router and remove the main board. 

3) Move strap W3 to the 1-2 position. 

4) Install the main board and reattach the power to the bridge/router and wait for the 
power-up diagnostics to finish. 

5) Remove power from the bridge/ router. 

6) Remove the main board. 

7) Move strap W3 to the 2-3 position. 

8) Install the main board and close the front. 

9) Power up the bridge/ router. 

10) Log into the bridge/router using the default password "BRIDGE" and change the 
password as desired. 
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Servicing Information 



Performing a Hardware Reset 

To do a full hardware reset (all configuration parameters cleared or set to defaults): 

1) Remove power from the bridge/ router. 

2) Open the front and remove the main board. 

3) Remove the batteries to remove backup power to the memory. 

4) Re-install the batteries. 

5) Install the main board back in the bridge/router and close the front. 

6) Power up the bridge/ router. 

Changing the Link Integrity on the lOBaseT LAN Interface 

To disable the link integrity option for the lOBaseT LAN interface, move the strap Wl to 
the main board under the battery board to the position shown below. To re-enable link 
integrity, move the strap back to the original position. 

1) Remove power from the bridge/ router. 

2) Open the front and remove the main board. 

3) Remove the battery board from the main board by removing the screw securing the 
battery board. 



I — Screw securing battery board 
to main board 




Figure C-2 Battery Board Removal 

4) Change strap Wl to disable or enable link integrity. 
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Servicing Information 











Link Integrity OFF ~\f Link Integrity ON 



Figure C-3 Link Integrity Strap for lOBaseT Connector 



5) Re-install the battery board on the main board by installing the screw removed 
previously. 

6) Install the main board back in the bridge/router and close the front. 

7) Power up the bridge/ router. 
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Servicing Information 

Performing a Software Upgrade 

1) Execute the Network (TFTP) command from the Load FLASH Set-Up 
menu. 

2) Enter "none" to connect locally or enter the remote site ID number or alias 
to connect to a remote site. 

3) Start the TFTP application to be used for transfers to the router. 
(The IP address of the router may be found in the Internet Set-Up menu.). 

4) Put the file "###.all" to the router from the Operational/Boot Code 
directory on the CD-ROM. 

(Any router not in Network Load BOOT mode will respond with an access 
violation error.) 

5) The router will verify the file "###.all" in memory, program and verify the 
FLASH, clear the configuration to default values (except: IP Address, IP 
Routing state, IP Forwarding state, WAN Environment, Link 1 & 2 State, 
the Switch Type, Directory Numbers, SPIDs, Password and connection 
data for the remote site, if applicable), and then reset. After the reset, the 
router will operate normally using the newly upgraded software. In some 
upgrade situations the Directory Numbers and SPIDs may be corrupted 
after the upgrade and will need to be re-entered. 

- The router may take up to two (2) minutes to program and verify the 
FLASH. The console will not respond during this time. 

To check on the router's current state during this process, get the file 
"status.txt" from the router. This file will report the router's state: both the 
mode and version if no errors have occurred, or an error message. 

On the rare occasion that during the programming of the FLASH something 
happens to the bridge/router (power hit or hardware reset), causing the FLASH 
to become corrupted, the bridge /router will restart in ZMODEM receive mode 
only. If the bridge/router does not start in ZMODEM receive mode: power down 
the bridge/ router, open the case, locate jumper W4 on the main circuit board (it is 
next to the batteries), put the jumper across pins 1-2, power up the bridge/router. 
The bridge/ router should now restart and be in ZMODEM receive mode. Once 
the file transfer is complete, the router will again come up in ZMODEM receive 
mode. Power down the unit and return the W4 jumper to pin positions 2-3. 
Please refer to Appendix D for information on removing the case and changing 
the strap settings 
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Servicing Information 



In the following diagram of a cluster of routers, when upgrading the three routers 
in the diagram, the upgrade order should be Router C, then Router B, and finally 
Router A. 

A TFTP software load to Router C would be performed as follows: 
Using TFTP, get config.txt from each router and save. 

Telnet to Router C. Enter the ID or alias of Router B in the Network (TFTP) 
option to put Router C in Network Load mode. When Router C restarts in 
Network Load mode, the connection to "Router B" will be re-established 
only if autocall is enabled on router B. 

The TFTP transfer of the upgrade code may now be performed from the PC 
to Router C. Once Router C has completed programming the flash and has 
restarted in operational mode, the connection to Router B will be re- 
established only if autocall is enabled on router B. 

Once router C is operating with the new software, the PC may be used to reload the 
config.txt file back to Router C. 

Repeat for Router B, then again for Router A. Perform the Router B upgrade 
using the ID or alias of Router A. Router A upgrades would not require a remote 
site ID as the PC used for TFTP transfers is located on the same LAN as Router 
A. 
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Appendix D 
Interface Pinouts 



Pinout Information 

Each link interface available is described with detailed information on pin designation. Standard interface cables will 
provide correct connections to modems, datasets, or DSU/ CSUs. 

When connecting two bridge/routers back- to-back without modems, a null-modem cable is required to 
crossover the pins on the links. Crossing over the pins allows two bridge/ routers both configured as DTE 
interfaces to be connected together. With this configuration, both bridge/routers will provide clocking for 
the links, and each bridge/ router must have a link speed defined. 

Link Clocking Information 

All of the link interfaces on the P2600 act as DTE devices, this means that they may be direcdy connected to 
DCE devices (modems, etc.) with the DCE devices providing the clocking for the link. The link speed is 
controlled by the DCE device. Setting the link speed on the P2600 will not result in a speed change on the 
link. 

Some DCE devices allow the DTE devices connected to them to supply a clock signal which is then routed 
back to the transmit clock pins on the DCE interface. This clock is then received by the P2600 link interface. 
By using this method, the P2600 may be in control of the link speed. The link speed may also be controlled 
by the P2600 when a null-modem cable is used to connect two routers in a back-to-back configuration. 

Changing the link speed within the menu system of the P2600 changes the clock output speed that is 
generated on the DTE Terminal Timing pins (external clocking pins) on the link interfaces. 



P2600 Installation & Applications Guic 



Servicing Information 



ATL-CSU/DSU Link Module Information 



The P2600 is currently produced with LXT CSU/DSU interface modules; however, the earlier model ATL 
CSU/DSU module is still compatible with the P2600 and may be used with it. Note that ATL master mode 
signaling is not compatible with the current standard 64K master mode signaling; therefore, for back to back 
connections, an ATL unit will only operate at 64K when connected to another ATL unit. If one interface is 
an ATL unit and the other is not, back to back operation must be set to 56K. 

The ATL-CSU/DSU link module is normally configured to receive clock from the connected network. 
When two ATL-CSU/DSU link modules are to be used on a leased line in a back-to-back set-up, one of the 
modules must provide the clock. 

These modules have UP/DOWN switches as illustrated below. 



When connecting two bridge/routers back- to-back with CSU/DSU link modules, a null-modem cable is required 
to crossover the pins on the links. Crossing over the pins allows two bridge/routers both configured as DTE 
interfaces to be connected together. 

Switch number 1 determines whether the ATL-CSU/DSU link module will generate clocks or receive clocks. 
When switch 1 is down (on), the normal position, the module receive clocks from the connected network. When 
switch 1 is up (up), the module will generate clocks. When a pair of routers are connected back- to-back with 
CSU/DSU link modules one module must be set to generate clocks and one module must be set to receive 
clocks. 

On 64 Kbps units only, switch number 3 determines the mode of the ATL-CSU/DSU. When switch 3 is down 
(on), the ATL-CSU/DSU is in DDS (Digital Data Service) mode for normal connection to the 64 Kbps digital 
service. When switch 3 is up (off), the ATL-CSU/DSU is in LDM (Limited Distance Modem) mode for back-to- 
back connection with a null-modem cable. 

On 56 Kbps units, the position of switch 3 is not a factor for back-to-back connection with a null-modem cable. 
Switch 1 must still be set as noted above. 



Switches 




CSU/DSU 
LINE 

Figure D-l Rear View of ATL-CSU/DSU Link Module Switches 



3.2 



Servicing Information 

CSU/DSU Module: 

The CSU/DSU interface module uses a standard RJ45 service connector, pinout specification RJ48S. 



CSU/DSU 



o 



o 



o 



o 



Figure D-2 Rear View of the CSU-DSU Connector 



The LXT411 CSU/DSU link connection is set to operate at 64 Kbps by default. The link may be set to 
56 Kbps via the software menus if required. 

When two CSU/DSU link routers are to be connected via a leased line in a back to back set-up, the unit 
must be set to 56 Kbps link speed and a null-modem crossover cable used for the connection. 

A DSU/ CSU crossover cable would be constructed as follows: 

1 -> 7 

2 -> 8 

7- > 1 

8- >2 



33 



Servicing Information 



TI/EI Module: 

The Tl /El interface module use a standard RJ45 service connector, pinout specification RJ48C. 



T1/E1 LINE 



o 



o 



o 



o 



Figure D-3 Rear View of the Tl/El Connector 

When two Tl/El routers are to be connected in a back to back set-up, a null-modem crossover cable 
used for the connection. 

A Tl /El crossover cable would be constructed as follows: 

1 ->4 

2 -> 5 
5->2 
4-> 1 



Pins 1 and 2 are receive (1 = ring, 2= tip) 
Pins 4 and 5 are transmit (4 = ring, 5= tip) 



3.4 



Servicing Information 



Console Pinouts 



The connector shown here and pinouts described here correspond to the connector labeled "Console" on 
the back of theP2600. 



DB25 Female DCE 




Contact 


CCITT 


IEEE 


Circuit 


Direction 


Number 


Circuit 


Circuit 


Name 


To 


From 




Number 


Desig. 




DCE 


DCE 


1 


101 


AA 


Protective Ground 


NA 


2 


103 


BA 


Transmitted Data 


X 




3 


104 


BB 


Received Data 




X 


5 


106 


CB 


Clear to Send 




X 


6 


107 


CC 


Data Set Ready 




X 


7 


102 


AB 


Signal Ground 


NA 


8 


109 


CF 


Received Line Signal Detector (CD) 




X 


20 


108.2 


CD 


Data Terminal Ready 


X 




22 


125 


CE 


Ring Indicator 




X 



Figure D-4 Console Pinouts 
The connecting cable must be a shielded cable. 

When connecting the P2600 console directly to a modem, a null modem cable must be used because both the 
P2600 console and the modem are DCE devices. A null modem cable with pinouts according to the 
following figure must be used. 



Contact Number 


Modem Contact Number 


8 


20 


3 


2 


2 


3 


20 


8 


7 


7 


4 


5 


5 


4 


22 


22 



Figure D-5 Console Null Modem Cable Pinouts 



3.5 



Servicing Information 



V.24 & RS232C Link Pinouts 

The connector shown here and pinouts described here correspond to the connector labeled "RS232 / V.24" 
on the back of the P2600. 



DB25 Female DTE 




Contact CCITT 
Number Circuit 
Number 



101 



10 



11 



12 



13 



14 



15 



16 



17 



18 



19 



20 



21 



22 



23 



24 



25 



103 



104 



105 



107 



102 



109 



114 



115 



141 



108.2 



125 



113 



Circuit 



AA 



BA 



BB 



CA 



CC 



AB 



CF 



DB 



DD 



CD 



CE 



DA 



Circuit 
Name 



Protective Ground 



Transmitted Data 



Received Data 



Request to Send 



Data Set Ready 



Signal Ground 



Received Line Signal Detector (CD) 



Transmit Signal Element Timing (DCE 
Source) 



Receive Signal Element Timing (DCE Source) 



Local Loopback 



Data Terminal Ready 



Ring Indicator 



Transmit Signal Element Timing (DTE Source) 



Direction 
To From 
DCE DCE 



NA 



NA 



Figure D-6 RS232 Link Pinouts 
The connecting cable must be a shielded cable. 

NOTE For U.K. Approval: 

The connecting cable may be any length between 0 and 5M. Each end must be terminated in a male 25 pin 
X.21 bis connector as defined in ISO-2110 1989. 



3.6 



Servicing Information 



V.II/X.2I LinkPinouts 

The connector shown here and pinouts described here correspond to the connector labeled "V.ll/x.21" on 
the back of theP2600. 



DB15 Female DTE 




Direction 



Contact 


Circuits 


Circuit 


To F 


: rom 


Number 


Reference 


Name 


DCE 


DCE 


1 




Protective Ground 


NA 


2 


T(A) 


Transmitted Data (A) 


X 




3 


C(A) 


Control (A) 


X 




4 


R(A) 


Received Data (A) 




X 


5 


I (A) 


Indication (A) 




X 


6 


S(A) 


Signal Element Timing (A) 




X 


7 










8 


Ground 


Signal Ground 


NA 


9 


T(B) 


Transmitted Data (B) 


X 




10 


C(B) 


Control (B) 


X 




11 


R(B) 


Received Data (B) 




X 


12 


l(B) 


Indication (B) 




X 


13 


S(B) 


Signal Element Timing (B) 




X 


14 










15 











Figure D-7 V.ll/x.21 Link Pinouts 
The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs 
within the connecting cable. 

NOTE For U.K. Approval: 

The connecting cable may be any length between 0 and 5M. Each end must be terminated in a male 15 pin 
X.21 connector as defined in ISO-4903 1989, but one end of the cable must have UNC-4-40 screws and the 
other end must have M3 screws. 



3.7 



Servicing Information 



RS442 & RS530 Link Pinouts 

The connector shown here and pinouts described here correspond to the connector labeled "RS530" on the 
back of theP2600. 



DB25 Female DTE 




Direction 



Contact 




Circuit 


To 


From 


Number 


Circuit 


Name 


DCE 


DCE 


1 


Shield 


Protective Ground 


NA 


2 


BA (A) 


Transmitted Data 


X 




3 


n n / a \ 

BB (A) 


Received Data 




X 


4 


CA (A) 


Request to Send 


X 




5 


CB (A) 


Clear to Send 




X 


6 


CC (A) 


Data Set Ready 




X 


7 


a n 

AB 


Signal Ground 


NA 


o 
8 


CF (A) 


Received Line Signal Detector 




X 


9 


DD (B) 


Receive Signal Element Timing (DCE Source) 




X 


10 


CF (B) 


Received Line Signal Detector 




X 


11 


DA (B) 


Transmit Signal Element Timing (DTE Source) 


X 




12 


DB (B) 


Transmit Signal Element Timing (DCE Source) 




X 


13 


CB (B) 


Clear to Send 




X 


14 


BA (B) 


Transmitted Data 


X 




15 


DB (A) 


Transmit Signal Element Timing (DCE Source) 




X 


16 


BB (B) 


Received Data 




X 


17 


DD (A) 


Receive Signal Element Timing (DCE Source) 




X 


18 


LL 


Local Loopback 


X 




19 


CA(B) 


Request to Send 


X 




20 


CD (A) 


Data Terminal Ready 


X 




21 


RL 


Remote Loopback 


X 




22 


CC (B) 


Data Set Ready 




x I 


23 


CD (B) 


Data Terminal Ready 


X 




24 


DA (A) 


Transmit Signal Element Timing (DTE Source) 


X 




25 











Figure D-8 RS530 Link Pinouts 
The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs 
within the connecting cable. 



3.8 



Servicing Information 

V.35 Link Pinouts 

The connector pinouts described here correspond to the connector labeled "V.35" on the back of the 
P2600. 




DB25 


M.34 




Direction 


Contact 


Contact 


Circuit 


To 


From 


Number 


Number 


Name 


DCE 


DCE 


1 


A 


Protective Ground 


NA 


2 










3 










4 


C 


Request to Send 


X 




5 










6 


E 


Data Set Ready 




X 


7 


B 


Signal Ground 


NA 


8 


F 


Data Channel Received Line Signal Detector 




X 


9 


P 


Transmitted Data (A) 


X 




10 


S 


Transmitted Data (B) 


X 




11 


R 


Received Data (A) 




X 


12 


T 


Received Data (B) 




X 


13 










14 


V 


Receiver Signal Element Timing (A) 




X 


15 










16 


X 


Receiver Signal Element Timing (B) 




X 


17 










18 


u 


Transmitter Signal Element Timing (A) DTE 


X 




19 


w 


Transmitter Signal Element Timing (B) DTE 


X 




20 


H 


Data Terminal Ready 


X 




21 




Local Loopback 


X 




22 


J 


Calling Indicator 




X 


23 


Y 


Transmitter Signal Element Timing (A) 




X 


24 










25 


a 


Transmitter Signal Element Timing (B) 




X 



Figure D-9 V.35 Link Pin Outs 



The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs within the 
connecting cable. 

NOTE For U.K. Approval: 

The connecting cable may be any length between 0 and 5M. One end must be terminated in a male 34 pin X.21 bis connector 
as defined in ISO-2593 1984. The other end must be terminated in a male 25 pin X.21 bis connector as defined in ISO-2110 
1989. 



3.9 



Servicing Information 



RS232 Null-Modem Cable Configuration 



DB25 MALE 



DB25 MALE 



1 


Shield 




Shield 1 


2 


Transmitted Data 




Received Data 3 


3 


Received Data 




Transmitted Data 2 


4 


Request To Send 




Data Set Ready 6 


6 


Data Set Ready 




Request To Send 4 


20 


DTE Ready 


Received Line Signal Detector (CD) 8 


7 


Signal Ground 




Signal Ground 7 


8 


Received Line Signal Detector (CD) 


DTE Ready 20 


15 


Transmit Timing DCE Source 




Receiver Timing DCE Source 17 


17 


Receiver Timing DCE Source 


^ Transmit Timing DCE Source 15 


24 


Transmit Timing DTE Source 


J 


Transmit Timing DTE Source 24 





Figure D-10 RS232 Null-Modem Cable 
The connecting cable must be a shielded cable. 

This cable is needed when it is necessary to connect two units back-to-back and a set of 
modems is not available. Note that this cable specifies DB25 connectors on each end to allow 
direct connection to the link interface connector on each unit. The link speed must be defined 
for each of the two units. 



3.10 



Servicing Information 

V.35 Null-Modem Cable Configuration 



DB25 MALE 



DB25 MALE 




9 Transmitted Data (A) 


Received Data (A) 11 


10 Transmitted Data (B) 


Received Data (B) 12 


11 Received Data (A) 


Transmitted Data (A) 9 



1 Protective GND 



Protective GND 1 



12 Received Data (B) 



Transmitted Data (B) 1 Q | 



18 Transmitter Signal Element Timing (A) Receiver Signal Element Timing (A) 14 1 



19 Transmitter Signal Element Timing (B) 



14 Receiver Signal Element Timing (A) 



16 Receiver Signal Element Timing (B) 



23 Transmitter Signal Element Timing (A) 
25 Transmitter Signal Element Timing (B) 



Receiver Signal Element Timing (B) 1 6 1 



Transmitter Signal Element Timing (A) 23 1 



Transmitter Signal Element Timing (B) 25 



Transmitter Signal Element Timing (A) 18 
Transmitter Signal Element Timing (B) 19 



20 Data Terminal Ready 



Data Channel Received Line Signal Detector (CD) 8 



8 Data Channel Received Line Signal Detector (CD) 



Data Terminal Ready 20 



7 Signal Ground 



Signal Ground 7 



4 Request to Send 



Data Set Ready 6 



6 Data Set Ready 



Request to Send 4 



Figure D-ll V-35 Null-Modem Cable 
The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs 
within the connecting cable. 

This cable is needed when it is necessary to connect two units back-to-back and a set of 
modems is not available. Note that this cable specifies DB25 connectors on each end to allow 
direct connection to the link interface connector on each unit. 



The link speed must be defined for each of the two units. 



3.11 



Servicing Information 



RS530 Null-Modem Cable Configuration 



DB25 MALE 



DB25 MALE 



Shield 



Shield 1 



2 Transmitted Data (A) 



Received Data (A 



14 Transmitted Data (B) 



Received Data (B 



3 Received Data (A) 



Transmitted Data (A 



16 Received Data (B) 



Transmitted Data (B 



4 Request To Send (A) 



19 Request To Send (B) 



5 Clear To Send (A) 



13 Clear To Send (B) 



6 DCE Ready (A) 



DCE Ready (A 



22 DCE Ready (B) 



DCE Ready (B 



Clear To Send (A 



Clear To Send (B 



Request To Send (A 



Request To Send (B 



20 DTE Ready (A) 



Received Line Signal Detector (A 



23 DTE Ready (B) 



Received Line Signal Detector (B 



7 Signal Ground 



Signal Ground 7 



8 Received Line Signal Detector (A) 



DTE Ready (A 



10 Received Line Signal Detector (B) 



DTE Ready (B) 23 



16 



14 



22 



_13 
4 



19 



10 



20 



15 Transmit Timing (A) DCE Source 



12 Transmit Timing (B) DCE Source 



24 Transmit Timing (A) DTE Source 



Receiver Timing (A) DCE Source 17 



11 Transmit Timing (B) DTE Source 
18 Local Loopback 



Receiver Timing (B) DCE Source 9 



21 Remote Loopback 



17 Receiver Timing (A) DCE Source 



9 Receiver Timing (B) DCE Source 



Transmit Timing (A) DTE Source 24 
Transmit Timing (B) DTE Source 11 



Local Loopback 18 
Remote Loopback 21 
Transmit Timing (A) DCE Source 15 



Transmit Timing (B) DCE Source 12 



25 Test Mode 



Test Mode 25 



Figure D-12 RS530 Null-Modem Cable 
The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs 
within the connecting cable. 

This cable is needed when it is necessary to connect two units back-to-back and a set of modems is not 
available. Note that this cable specifies DB25 connectors on each end to allow direct connection to the 
link interface connector on each unit. The link speed must be defined for each of the two units. 



3.12 



Servicing Information 



RS530 To RS449 Conversion Cable 



DB25 MALE DB37 MALE/FEMALE 
_2 Transmitted Data (A) A_ 

14 Transmitted Data (B) 22^ 

_3 Received Data (A) 6_ 

16 Received Data (B) 24_ 

_8 Received Line Signal Detector (A) 1 3 

10 Received Line Signal Detector (B) 31 

_6 Data Set Ready (A) I! 

22 Data Set Ready (B) 29^ 

4_ Request to Send (A) 1_ 

19 Request to Send (B) 25_ 

J5 Clear to Send (A) 9^ 

13 Clear to Send (B) 27_ 

20 Data Terminal Ready (A) 12^ 

23 Data Terminal Ready (B) 30 

17 Receiver Signal Element Timing (DCE Source) (A) 8^ 

_9 Receiver Signal Element Timing (DCE Source) (B) 26 

15 Transmit Signal Element Timing (DCE Source) (A) 5_ 

12 Transmit Signal Element Timing (DCE Source) (B) 23 

24 Transmit Signal Element Timing (DTE Source) (A) \J_ 

11 Transmit Signal Element Timing (DTE Source) (B) 35^ 

_7 Signal Ground 19_ 

1 Shield 1 



Figure D-13 RS530 to RS449 Conversion Cable 
The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs 
within the connecting cable. 

This cable is used to connect an RS530 link to an RS449 device. The cable converts from a DB25 
connector to a DB37 connector. 



3.13 



V.I I/X.2I Null-Modem Cable Configuration 



Servicing Information 



DB15 MALE 



DB15 MALE 



1 Protective Ground 


Protective Ground 


1 


2 Transmit Data (A) 


Receive Data (A) 


4 


3 Control (A) 


Indication (A) 


5 


4 Receive Data (A) 


Transmit Data (A) 


2 


5 Indication (A) 


Control (A) 


3 


6 Signal Element Timing (A) 


Signal Element Timing (A) 


6 


7 Not Used 


Not Used 


7 


8 Signal Ground 


Signal Ground 


8 


9 Transmit Data (B) 


Receive Data (B) 


11 


10 Control (B) 


Indication (B) 


12 


11 Receive Data (B) 


Transmit Data (B) 


9 


12 Indication (B) 


Control (B) 


10 


13 Signal Element Timing (B) 


Signal Element Timing (B) 


13 


14 Not Used 


Not Used 


14 


15 Not Used 


Not Used 


15 



Figure D-14 V.11/X.21 Null-Modem Cable 
The connecting cable must be a shielded cable. 

Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs 
within the connecting cable. 

This cable is needed when it is necessary to connect two units back-to-back and a set of modems is not 
available. Note that this cable specifies DBI5 connectors on each end to allow direct connection to the 
link interface connector on each unit. The link speed must be defined for each of the two units. 

When using this cable to connect two units back-to-back, a jumper must be installed on pinheaders W8 
and W9 on one of the V. I I/X.27 interface modules. This allows that particular module to generate the 
required timing signals. 



3.14 



